CVEvulnerability
CVE-2010-0769
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-04-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the resources.xml file.
Affected configurations
• ibm websphere application server (<= 6.0.2.39)
• ibm websphere application server 6.0
• ibm websphere application server 6.0.0.2
• ibm websphere application server 6.0.0.3
• ibm websphere application server 6.0.1
• ibm websphere application server 6.0.1.2
• ibm websphere application server 6.0.2
• ibm websphere application server 6.0.2.1
• ibm websphere application server 6.0.2.3
• ibm websphere application server 6.0.2.5
• ibm websphere application server 6.0.2.7
• ibm websphere application server 6.0.2.9
• ibm websphere application server 6.0.2.11
• ibm websphere application server 6.0.2.13
• ibm websphere application server 6.0.2.15
• ibm websphere application server 6.0.2.17
• ibm websphere application server 6.0.2.19
• ibm websphere application server 6.0.2.21
• ibm websphere application server 6.0.2.23
• ibm websphere application server 6.0.2.25
• ibm websphere application server 6.0.2.27
• ibm websphere application server 6.0.2.29
• ibm websphere application server 6.0.2.31
• ibm websphere application server 6.0.2.33
• ibm websphere application server 6.0.2.35
• ibm websphere application server 6.0.2.37
• ibm websphere application server (<= 6.1.0.29)
• ibm websphere application server 6.1.0
• ibm websphere application server 6.1.0.1
• ibm websphere application server 6.1.0.2
• ibm websphere application server 6.1.0.3
• ibm websphere application server 6.1.0.5
• ibm websphere application server 6.1.0.7
• ibm websphere application server 6.1.0.9
• ibm websphere application server 6.1.0.11
• ibm websphere application server 6.1.0.13
• ibm websphere application server 6.1.0.15
• ibm websphere application server 6.1.0.17
• ibm websphere application server 6.1.0.19
• ibm websphere application server 6.1.0.21
• ibm websphere application server 6.1.0.23
• ibm websphere application server 6.1.0.25
• ibm websphere application server 6.1.0.27
• ibm websphere application server 7.0
• ibm websphere application server 7.0.0.1
• ibm websphere application server 7.0.0.3
• ibm websphere application server 7.0.0.5
• ibm websphere application server 7.0.0.7
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/39140 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK95089 www-01.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57185 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/39140 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK95089 www-01.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57185 exchange.xforce.ibmcloud.com