Описание
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. IBM X-Force ID: 144346.
Ссылки
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
- VDB EntryVendor Advisory
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
- VDB EntryVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ibm:websphere_application_server:7.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_application_server:9.0.0.0:*:*:*:*:*:*:*
EPSS
Процентиль: 5%
0.00022
Низкий
4.4 Medium
CVSS3
6.7 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
CWE-312
Связанные уязвимости
CVSS3: 6.7
github
больше 3 лет назад
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. IBM X-Force ID: 144346.
EPSS
Процентиль: 5%
0.00022
Низкий
4.4 Medium
CVSS3
6.7 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
CWE-312