Описание
WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.
WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2006-2436
- http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html
- http://secunia.com/advisories/20032
- http://securityreason.com/securityalert/910
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881
- http://www-1.ibm.com/support/search.wss?rs=0&q=PK17589&apar=only
- http://www.vupen.com/english/advisories/2006/1736
EPSS
Процентиль: 73%
0.00745
Низкий
CVE ID
Связанные уязвимости
nvd
больше 19 лет назад
WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.
EPSS
Процентиль: 73%
0.00745
Низкий