Lucene search
HistoryOct 03, 2022 - 4:13 p.m.
CVE-2008-7274
ibm
websphere
app server
6.1.0.9
jaas login
vulnerability
cve-2008-7274
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
30.8%
IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2) providing an empty password.
Affected configurations
Node
ibmwebsphere_application_serverMatch6.1.0.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:websphere_application_server | ibm websphere application server | eq | 6.1.0.9 |
Related
prion
prion
Default credentials
2011-02-15 01:00:00
openvas
openvas
IBM WebSphere Application Server (WAS) Security Bypass Vulnerability
2011-02-23 00:00:00
IBM WebSphere Application Server (WAS) Security Bypass Vulnerability
2011-02-23 00:00:00
nvd
nvd
CVE-2008-7274
2011-02-15 01:00:01
cvelist
cvelist
CVE-2008-7274
2022-10-03 16:13:53
nessus
nessus
IBM WebSphere Application Server < 6.1.0.15 Multiple Vulnerabilities
2010-04-05 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
30.8%
Related for CVE-2008-7274