CVE-2008-5413: Exposure of Sensitive Information to an Unauthorized Actor

PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server WAS 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the 1 systemout.log and 2 ffdc files. NOTE: this is probably a duplicate of CVE-2009-0434...

CVE-2008-5411: Undefined Security Weakness

IBM WebSphere Application Server WAS 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP," which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

CVE-2008-5412: Undefined Security Weakness

Unspecified vulnerability in IBM WebSphere Application Server WAS 7 before 7.0.0.1 on Windows has unknown impact and attack vectors related to JSPs. NOTE: this is probably a duplicate of CVE-2009-0438...

CVE-2008-4678: Undefined Security Weakness

The HTTPRequestParser method in the HTTP Transport component in IBM WebSphere Application Server WAS 6.0.2 before 6.0.2.31 allows remote attackers to cause a denial of service controller 0C4 abend and application hang via a long HTTP Host header, related to "storage overlay" on the stack and a...

CVE-2008-4679: Improper Authentication

The Web Services Security component in IBM WebSphere Application Server WAS 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when Certificate Store Collections is configured to use Certificate Revocation Lists CRL, does not call the setRevocationEnabled method on the PKIXBuilderParameters object,...

IBM WebSphere Application Server 6.1 < Fix Pack 19 Unspecified Vulnerability

Binary data 4685.prm...

CVE-2008-4111: Undefined Security Weakness

Unspecified vulnerability in Servlet Engine/Web Container in IBM WebSphere Application Server WAS 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when the FileServing feature is enabled, has unknown impact and attack vectors...

Information disclosure

Unspecified vulnerability in Wsadmin in the System Management/Repository component in IBM WebSphere Application Server WAS 5.1 before 5.1.1.19 allows attackers to obtain sensitive information via vectors related to "previously encrypted properties" that are not encrypted...

CVE-2008-3235

Unspecified vulnerability in the PropFilePasswordEncoder utility in the Security component in IBM WebSphere Application Server WAS 5.1 before 5.1.1.19 has unknown impact and attack vectors...

CVE-2008-3236

Unspecified vulnerability in Wsadmin in the System Management/Repository component in IBM WebSphere Application Server WAS 5.1 before 5.1.1.19 allows attackers to obtain sensitive information via vectors related to "previously encrypted properties" that are not encrypted...

CVE-2008-3236

The vulnerability CVE-2008-3236 affects IBM WebSphere Application Server (WAS) 5.1 and earlier, in the Wsadmin within the System Management/Repository component. The root cause is that previously encrypted properties were not actually encrypted, enabling an attacker to obtain sensitive informatio...

CVE-2008-3236

Unspecified vulnerability in Wsadmin in the System Management/Repository component in IBM WebSphere Application Server WAS 5.1 before 5.1.1.19 allows attackers to obtain sensitive information via vectors related to "previously encrypted properties" that are not encrypted...

CVE-2008-3235: Undefined Security Weakness

Unspecified vulnerability in the PropFilePasswordEncoder utility in the Security component in IBM WebSphere Application Server WAS 5.1 before 5.1.1.19 has unknown impact and attack vectors...

CVE-2008-3236: Undefined Security Weakness

Unspecified vulnerability in Wsadmin in the System Management/Repository component in IBM WebSphere Application Server WAS 5.1 before 5.1.1.19 allows attackers to obtain sensitive information via vectors related to "previously encrypted properties" that are not encrypted...

CVE-2008-2550

IBM WebSphere Application Server 6.1 prior to 6.1.0.17 is affected by a vulnerability in the Web Services Security SOAP header attribute, with unspecified impact and attack vectors. The issue is associated with CVE-2008-2550. Public references note the vulnerability exists in WAS 6.1 before Fix P...

CVE-2008-2550: Undefined Security Weakness

Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header...

CVE-2008-2221: Undefined Security Weakness

Unspecified vulnerability in the Java plugin in IBM WebSphere Application Server 5.0.2 allows untrusted applets to gain privileges via unknown attack vectors...

CVE-2008-0741: Undefined Security Weakness

Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server WAS before 6.0.2 Fix Pack 25 6.0.2.25 has unknown impact and attack vectors...

CVE-2008-0740: Undefined Security Weakness

IBM WebSphere Application Server WAS before 6.0.2 Fix Pack 25 6.0.2.25 and 6.1 before Fix Pack 15 6.1.0.15 writes unspecified cleartext information to httpplugin.log, which might allow local users to obtain sensitive information by reading this file...

CVE-2008-0741

Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server WAS before 6.0.2 Fix Pack 25 6.0.2.25 has unknown impact and attack vectors...