CVE-2012-3306 in WebSphere Application Server
Summary
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-domain support is configured, does not purge password data from the authentication cache, which has unspecified impact and remote attack vectors.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
06/07/2012
Disclosure
09/25/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 6547 | IBM WebSphere Application Server Multidomain Support credentials management | 255 | Unproven | Official fix | CVE-2012-3306 |