CVE-2009-0899 | BDVDB-2026-36818 Detail

Description#

IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console (ISC) 6.0.1 do not properly set the IsSecurityEnabled security flag during migration of WebSphere Member Manager (WMM) to Virtual Member Manager (VMM) and a Federated Repository, which allows attackers to obtain sensitive information from repositories via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/35406
http://www-01.ibm.com/support/docview.wss?uid=swg21375859
https://exchange.xforce.ibmcloud.com/vulnerabilities/50882
http://www-1.ibm.com/support/docview.wss?uid=swg1PK78134

Exploit#

No public exploit known

History#

Version 12009-06-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.