NVD

Id
49165  
Name
CVE-2009-1900  
Description
The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5, when tracing is enabled, allow remote attackers to obtain sensitive information via unspecified use of the wsadmin scripting tool.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-06-03  
Modified Date
2009-08-15  
Seq
2009-1900  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
248927 49165 CVE-2009-1900 http://www-01.ibm.com/support/docview.wss?uid=swg27006876  View
248928 49165 CVE-2009-1900 http://www-01.ibm.com/support/docview.wss?uid=swg27007951  View
248929 49165 CVE-2009-1900 http://www-01.ibm.com/support/docview.wss?uid=swg27014463  View
248930 49165 CVE-2009-1900 PK84999  View
248931 49165 CVE-2009-1900 35405  View
248932 49165 CVE-2009-1900 ADV-2009-1464  View
248933 49165 CVE-2009-1900 was-configserviceapis-info-disclosure(51171)  View
248934 49165 CVE-2009-1900 was-configservice-info-disclosure-var1(52077)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40726 JVNDB-2009-001732 IBM WebSphere Application Server (WAS) の Administrative Console コンポーネントにおける重要な情報を取得される脆弱性 IBM WebSphere Application Server (WAS) の Administrative Console コンポーネント内の Configservice API には、重要な情報を取得される脆弱性が存在します。 CVE-2009-1900 39331 CVE-2009-1900 49165 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001732.html 2009-06-03 2009-08-19 View