CVE-2009-0504 in WebSphere Application Server

摘要

由 VulDB • 2026-07-04

IBM WebSphere Application Server (WAS) 7.0.x（低于 7.0.0.1）版本中，Web Services 组件的 WSPolicy 未能正确识别 IDAssertion.isUsed 绑定属性，这允许本地用户通过读取 SOAP 消息来发现密码。

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• 预定: 2009-02-10
• 披露: 2009-02-17
• 管理: 已接受
• 条目: VDB-46586
• CPE: 准备好
• CWE: CWE-200 (已确认)
• CVSS: 2.1 (NVD)
• EPSS: 0.00347
• KEV: 否
• 活动: 非常低
• 部门: Hospital, Government, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2009-0504
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2009-0504
• CVE Details: https://www.cvedetails.com/cve/CVE-2009-0504/