CVE-2009-0899

IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console (ISC) 6.0.1 do not properly set the IsSecurityEnabled security flag during migration of WebSphere Member Manager (WMM) to Virtual Member Manager (VMM) and a Federated Repository, which allows attackers to obtain sensitive information from repositories via unspecified vectors.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2009-06-03

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Integrated Solutions Console (Ibm)
• Websphere Application Server (Ibm)
• Websphere Portal (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21375859
• http://www-1.ibm.com/support/docview.wss?uid=swg1PK78134
• http://www.securityfocus.com/bid/35406
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50882