CVE-2010-0563

2022-10-0316:21:11

mitre

www.cve.org

ibm

websphere

sso

ssl

vulnerability

remote attackers

AI Score

Confidence

High

EPSS

0.002

Percentile

64.7%

JSON

The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers to obtain sensitive information by sniffing network sessions that were expected to be encrypted.