CVE-2009-0432 in WebSphere Application Server
Summary
The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19 does not enable the secure version, which allows remote attackers to obtain sensitive information via unspecified vectors.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
02/05/2009
Disclosure
02/10/2009
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 46457 | IBM WebSphere Application Server config | 16 | Not defined | Official fix | CVE-2009-0432 |