CVE-2008-7274 in WebSphere Application Serverinfo

Summary

IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2) providing an empty password.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

02/14/2011

Disclosure

02/14/2011

Entries

1

CPE

ready

CWE

CWE-20

CVSS

5.3

EPSS

0.00225

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2008-7274
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2008-7274
CVE Detailshttps://www.cvedetails.com/cve/CVE-2008-7274/

◂ PreviousOverviewNext ▸

Want to know what is going to be exploited?

We predict KEV entries!