CVE-2009-0434

Description

PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before 7.0.0.1, when Performance Monitoring Infrastructure (PMI) is enabled, allows local users to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2008-5413.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/48524

http://www.vupen.com/english/advisories/2009/0423

http://www.securityfocus.com/bid/33700

http://www-1.ibm.com/support/docview.wss?uid=swg1PK79230

http://www-1.ibm.com/support/docview.wss?uid=swg1PK63886

http://www-01.ibm.com/support/docview.wss?uid=swg27014463

http://www-01.ibm.com/support/docview.wss?uid=swg27007951

http://www-01.ibm.com/support/docview.wss?uid=swg27006876

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3