CVEvulnerability
CVE-2010-1651
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-05-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing (aka full trace logging for SIP) are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by reading the trace log.
Affected configurations
• ibm websphere application server 6.1
• ibm websphere application server 6.1.0
• ibm websphere application server 6.1.0.0
• ibm websphere application server 6.1.0.1
• ibm websphere application server 6.1.0.2
• ibm websphere application server 6.1.0.3
• ibm websphere application server 6.1.0.4
• ibm websphere application server 6.1.0.5
• ibm websphere application server 6.1.0.6
• ibm websphere application server 6.1.0.7
• ibm websphere application server 6.1.0.8
• ibm websphere application server 6.1.0.9
• ibm websphere application server 6.1.0.10
• ibm websphere application server 6.1.0.11
• ibm websphere application server 6.1.0.12
• ibm websphere application server 6.1.0.13
• ibm websphere application server 6.1.0.14
• ibm websphere application server 6.1.0.15
• ibm websphere application server 6.1.0.16
• ibm websphere application server 6.1.0.17
• ibm websphere application server 6.1.0.18
• ibm websphere application server 6.1.0.19
• ibm websphere application server 6.1.0.20
• ibm websphere application server 6.1.0.21
• ibm websphere application server 6.1.0.22
• ibm websphere application server 6.1.0.23
• ibm websphere application server 6.1.0.24
• ibm websphere application server 6.1.0.25
• ibm websphere application server 6.1.0.26
• ibm websphere application server 6.1.0.27
• ibm websphere application server 6.1.0.29
• ibm websphere application server 6.1.1
• ibm websphere application server 6.1.3
• ibm websphere application server 6.1.5
• ibm websphere application server 6.1.6
• ibm websphere application server 6.1.7
• ibm websphere application server 6.1.13
• ibm websphere application server 6.1.14
• ibm websphere application server 7.0
• ibm websphere application server 7.0.0.1
• ibm websphere application server 7.0.0.3
• ibm websphere application server 7.0.0.5
• ibm websphere application server 7.0.0.7
• ibm websphere application server 7.0.0.9
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/39628 Vendor Advisory
- http://secunia.com/advisories/40096 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM08892 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247 Patch
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829 www-01.ibm.com
- http://www.osvdb.org/65437 www.osvdb.org
- http://www.vupen.com/english/advisories/2010/1411 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58324 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/39628 Vendor Advisory
- http://secunia.com/advisories/40096 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM08892 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247 Patch
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829 www-01.ibm.com
- http://www.osvdb.org/65437 www.osvdb.org
- http://www.vupen.com/english/advisories/2010/1411 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58324 exchange.xforce.ibmcloud.com