CVE-2009-2087: Low severity IBM WebSphere Application Server Feature Pack for Web Services vulnerability
The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial of service (deployment failure) via unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2087?
CVE-2009-2087 is classified as a medium severity vulnerability.
How do I fix CVE-2009-2087?
To mitigate CVE-2009-2087, upgrade IBM WebSphere Application Server to version 6.1.0.25 or 7.0.0.5 and later.
Which versions of IBM WebSphere Application Server are affected by CVE-2009-2087?
CVE-2009-2087 affects IBM WebSphere Application Server versions 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5.
What type of attack does CVE-2009-2087 enable?
CVE-2009-2087 allows local users to exploit weak password obfuscation potentially leading to denial of service.
Is there a workaround for CVE-2009-2087?
There is no effective workaround for CVE-2009-2087; patching is recommended.