CVEvulnerability
CVE-2006-4137
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-08-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1) the log file, (2) "script generated syntax on wsadmin command line," and (3) traces.
Affected configurations
• ibm websphere application server 6.0
• ibm websphere application server 6.0.0.1
• ibm websphere application server 6.0.0.2
• ibm websphere application server 6.0.0.3
• ibm websphere application server 6.0.1
• ibm websphere application server 6.0.1.2
• ibm websphere application server 6.0.2
• ibm websphere application server 6.0.2.1
• ibm websphere application server 6.0.2.2
• ibm websphere application server 6.0.2.3
• ibm websphere application server 6.0.2.4
• ibm websphere application server 6.0.2.5
• ibm websphere application server 6.0.2.6
• ibm websphere application server 6.0.2.7
• ibm websphere application server 6.0.2.9
• ibm websphere application server 6.1.0.0
References
- http://secunia.com/advisories/21440 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 Patch
- http://www-1.ibm.com/support/search.wss?rs=0&q=PK27547&apar=only Patch
- http://www-1.ibm.com/support/search.wss?rs=0&q=PK27857&apar=only Patch
- http://www-1.ibm.com/support/search.wss?rs=0&q=PK28408&apar=only Patch
- http://www.securityfocus.com/bid/19463 Patch
- http://www.vupen.com/english/advisories/2006/3262 www.vupen.com
- http://secunia.com/advisories/21440 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 Patch
- http://www-1.ibm.com/support/search.wss?rs=0&q=PK27547&apar=only Patch
- http://www-1.ibm.com/support/search.wss?rs=0&q=PK27857&apar=only Patch
- http://www-1.ibm.com/support/search.wss?rs=0&q=PK28408&apar=only Patch
- http://www.securityfocus.com/bid/19463 Patch
- http://www.vupen.com/english/advisories/2006/3262 www.vupen.com