CVE-2006-2436

WebSphere Application Server 5.0.2 (or earlier cumulative fixes) stores admin and LDAP passwords in plaintext in FFDC logs following failed logins, enabling privilege escalation if logs are accessed. The underlying cause is plaintext credential logging in FFDC. Affected component: WebSphere Appli...