Back to search
CVE-2009-1898
Published: Jun 3, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
35301
third-party-advisory
x_refsource_SECUNIA
was-securelogin-info-disclosure(51170)
vdb-entry
x_refsource_XF
35405
vdb-entry
x_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg27006876
x_refsource_CONFIRM
PK77010
vendor-advisory
x_refsource_AIXAPAR
ADV-2009-1464
vdb-entry
x_refsource_VUPEN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now