IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the resources.xml file.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Information
Published : 2010-04-01 12:30
Updated : 2017-08-16 18:32
NVD link : CVE-2010-0769
Mitre link : CVE-2010-0769
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
ibm
- websphere_application_server