Lucene search
HistoryFeb 15, 2011 - 1:00 a.m.
CVE-2008-7274
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
30.9%
IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2) providing an empty password.
Affected configurations
Node
ibmwebsphere_application_serverMatch6.1.0.9
Related
prion
prion
Default credentials
2011-02-15 01:00:00
cve
cve
CVE-2008-7274
2022-10-03 16:13:53
openvas
openvas
IBM WebSphere Application Server (WAS) Security Bypass Vulnerability
2011-02-23 00:00:00
IBM WebSphere Application Server (WAS) Security Bypass Vulnerability
2011-02-23 00:00:00
cvelist
cvelist
CVE-2008-7274
2022-10-03 16:13:53
nessus
nessus
IBM WebSphere Application Server < 6.1.0.15 Multiple Vulnerabilities
2010-04-05 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
30.9%
Related for NVD:CVE-2008-7274