CVE-2009-0434: Infoleak
PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before 7.0.0.1, when Performance Monitoring Infrastructure (PMI) is enabled, allows local users to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2008-5413.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM WebSphere Application Serverto a version that resolves this vulnerability.Fixed in 6.0.2.31 - Upgrade
Upgrade
IBM WebSphere Application Serverto a version that resolves this vulnerability.Fixed in 6.1.0.21 - Upgrade
Upgrade
IBM WebSphere Application Serverto a version that resolves this vulnerability.Fixed in 7.0.0.1 - Configuration
Disable Performance Monitoring Infrastructure (PMI) (set PMI enabled to false) to avoid exposure of sensitive information in systemout.log and ffdc files when PMI is not required.
Performance Monitoring Infrastructure (PMI) enabled = false
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0434?
CVE-2009-0434 has a severity rating that indicates significant risk due to the exposure of sensitive information.
How do I fix CVE-2009-0434?
To fix CVE-2009-0434, upgrade to the latest version of IBM WebSphere Application Server that is not affected by this vulnerability.
Who is affected by CVE-2009-0434?
CVE-2009-0434 affects local users of IBM WebSphere Application Server versions 6.0.x, 6.1.x, and 7.0.x prior to specific patch levels.
What type of information can be exposed in CVE-2009-0434?
CVE-2009-0434 allows local users to obtain sensitive information from the Performance Monitoring Infrastructure when enabled.
Is there a workaround for CVE-2009-0434?
A workaround for CVE-2009-0434 involves disabling Performance Monitoring Infrastructure if upgrading is not immediately possible.