CVEvulnerability
CVE-2009-0899
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-06-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console (ISC) 6.0.1 do not properly set the IsSecurityEnabled security flag during migration of WebSphere Member Manager (WMM) to Virtual Member Manager (VMM) and a Federated Repository, which allows attackers to obtain sensitive information from repositories via unspecified vectors.
Affected configurations
• ibm integrated solutions console 6.0.1
• ibm websphere application server (>= 6.1 <= 6.1.0.24)
• ibm websphere application server (>= 7.0 <= 7.0.0.4)
• ibm websphere portal (>= 5.1 < 6.0.0.0)
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21375859 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK78134 Vendor Advisory
- http://www.securityfocus.com/bid/35406 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50882 Third Party Advisory, VDB Entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21375859 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK78134 Vendor Advisory
- http://www.securityfocus.com/bid/35406 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50882 Third Party Advisory, VDB Entry