CVE-2010-0563

The Single Sign-on SSO functionality in IBM WebSphere Application Server WAS 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers to obtain sensitive information by sniffing network sessions that were expected to be encrypted...

CVE-2010-0563

The CVE-2010-0563 entry concerns IBM WebSphere Application Server (WAS) 7.0.0.0–7.0.0.8 where the Requires SSL configuration option is not recognized by SSO, permitting exposure of sensitive data via sniffed network sessions that were expected to be encrypted. Documents specify the affected produ...