CVE-2009-0438 in WebSphere Application Server
Summary
IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass "Authorization checking" and obtain sensitive information from JSP pages via a crafted request. NOTE: this is probably a duplicate of CVE-2008-5412.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
02/05/2009
Disclosure
02/10/2009
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 46463 | IBM WebSphere Application Server access control | 264 | Not defined | Official fix | CVE-2009-0438 |