Information disclosure in Ibm Websphere Application Server
CVE-2010-2323
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the default_create.log file that is associated with profile creation by the BBOWWPFx job and the zPMT.
Vulnerability class: Information Disclosure
EPSS: 0.010 (60.6th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_application_server — versions 7.0, 7.0.0.3, 7.0.0.5
- Ibm Zos
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR, Vendor Advisory)