CVEvulnerability
CVE-2010-1650
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-05-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.41, 6.1.x before 6.1.0.31, and 7.0.x before 7.0.0.11, when the -trace option (aka debugging mode) is enabled, executes debugging statements that print string representations of unspecified objects, which allows attackers to obtain sensitive information by reading the trace output.
Affected configurations
• ibm websphere application server 6.0
• ibm websphere application server 6.0.0.1
• ibm websphere application server 6.0.0.2
• ibm websphere application server 6.0.0.3
• ibm websphere application server 6.0.1
• ibm websphere application server 6.0.1.1
• ibm websphere application server 6.0.1.2
• ibm websphere application server 6.0.1.3
• ibm websphere application server 6.0.1.5
• ibm websphere application server 6.0.1.7
• ibm websphere application server 6.0.1.9
• ibm websphere application server 6.0.1.11
• ibm websphere application server 6.0.1.13
• ibm websphere application server 6.0.1.15
• ibm websphere application server 6.0.1.17
• ibm websphere application server 6.0.2
• ibm websphere application server 6.0.2.1
• ibm websphere application server 6.0.2.2
• ibm websphere application server 6.0.2.3
• ibm websphere application server 6.0.2.4
• ibm websphere application server 6.0.2.5
• ibm websphere application server 6.0.2.6
• ibm websphere application server 6.0.2.7
• ibm websphere application server 6.0.2.8
• ibm websphere application server 6.0.2.9
• ibm websphere application server 6.0.2.10
• ibm websphere application server 6.0.2.11
• ibm websphere application server 6.0.2.12
• ibm websphere application server 6.0.2.13
• ibm websphere application server 6.0.2.14
• ibm websphere application server 6.0.2.15
• ibm websphere application server 6.0.2.16
• ibm websphere application server 6.0.2.17
• ibm websphere application server 6.0.2.18
• ibm websphere application server 6.0.2.19
• ibm websphere application server 6.0.2.20
• ibm websphere application server 6.0.2.21
• ibm websphere application server 6.0.2.22
• ibm websphere application server 6.0.2.23
• ibm websphere application server 6.0.2.24
• ibm websphere application server 6.0.2.25
• ibm websphere application server 6.0.2.27
• ibm websphere application server 6.0.2.28
• ibm websphere application server 6.0.2.29
• ibm websphere application server 6.0.2.30
• ibm websphere application server 6.0.2.31
• ibm websphere application server 6.0.2.33
• ibm websphere application server 6.0.2.35
• ibm websphere application server 6.0.2.37
• ibm websphere application server 6.0.2.39
• ibm websphere application server 6.1
• ibm websphere application server 6.1.0
• ibm websphere application server 6.1.0.0
• ibm websphere application server 6.1.0.1
• ibm websphere application server 6.1.0.2
• ibm websphere application server 6.1.0.3
• ibm websphere application server 6.1.0.4
• ibm websphere application server 6.1.0.5
• ibm websphere application server 6.1.0.6
• ibm websphere application server 6.1.0.7
… and 34 more
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/39628 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM06839 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247 Patch
- http://www.vupen.com/english/advisories/2010/0994 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58323 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/39628 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM06839 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247 Patch
- http://www.vupen.com/english/advisories/2010/0994 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58323 exchange.xforce.ibmcloud.com