Lucene search

PRIOn knowledge basePRION:CVE-2006-2430

HistoryMay 17, 2006 - 10:06 a.m.

Design/Logic Flaw

2006-05-1710:06:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

89.0%

JSON

IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in addNode.log, which allows attackers to gain privileges.

CPENameOperatorVersion
websphere_application_servereq5.0.0
websphere_application_servereq6.0.2.1
websphere_application_servereq6.0.2.5
websphere_application_servereq5.1.1
websphere_application_servereq5.1.0
websphere_application_servereq5.0.1
websphere_application_servereq6.0.2.6
websphere_application_servereq6.0.2.2
websphere_application_servereq6.0.2
websphere_application_servereq6.0.2.4

Name	Operator	Version
websphere_application_server	eq	5.0.0
websphere_application_server	eq	6.0.2.1
websphere_application_server	eq	6.0.2.5
websphere_application_server	eq	5.1.1
websphere_application_server	eq	5.1.0
websphere_application_server	eq	5.0.1
websphere_application_server	eq	6.0.2.6
websphere_application_server	eq	6.0.2.2
websphere_application_server	eq	6.0.2
websphere_application_server	eq	6.0.2.4

Rows per page:

1-10 of 131

References

archives.neohapsis.com/archives/bugtraq/2006-05/0175.html

secunia.com/advisories/20032

securityreason.com/securityalert/910

www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK16492&uid=swg1PK22416&loc=en_US&cs=utf-8&lang=

www-1.ibm.com/support/docview.wss?rs=180&uid=swg24011773

www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012009

www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064

www-1.ibm.com/support/search.wss?rs=0&q=PK16492&apar=only

www.osvdb.org/25372

www.vupen.com/english/advisories/2006/1736