CVEvulnerability

CVE-2006-2430

10.0 HIGH Published 2006-05-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-05-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in addNode.log, which allows attackers to gain privileges.

Affected configurations

• ibm websphere application server 5.0.0 • ibm websphere application server 5.0.1 • ibm websphere application server 5.0.2 • ibm websphere application server 5.1.0 • ibm websphere application server 5.1.1 • ibm websphere application server 6.0.2 • ibm websphere application server 6.0.2.1 • ibm websphere application server 6.0.2.2 • ibm websphere application server 6.0.2.3 • ibm websphere application server 6.0.2.4 • ibm websphere application server 6.0.2.5 • ibm websphere application server 6.0.2.6 • ibm websphere application server 6.0.2.7

References