CVE-2009-2743: Low severity ibm websphere application server feature pack for web services vulnerability
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27, and 7.0 before 7.0.0.7, does not properly handle an exception occurring after use of wsadmin scripts and configuration of JAAS-J2C Authentication Data, which allows local users to obtain sensitive information by reading the First Failure Data Capture (FFDC) log file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2743?
CVE-2009-2743 is classified as a moderate severity vulnerability.
How do I fix CVE-2009-2743?
To fix CVE-2009-2743, you should upgrade your IBM WebSphere Application Server to the latest version as recommended in the vendor's security advisory.
What software versions are affected by CVE-2009-2743?
CVE-2009-2743 affects IBM WebSphere Application Server versions 6.1 before 6.1.0.27 and 7.0 before 7.0.0.7.
What type of information can be compromised due to CVE-2009-2743?
CVE-2009-2743 allows local users to obtain sensitive authentication data due to improper exception handling.
Can CVE-2009-2743 be exploited remotely?
No, CVE-2009-2743 can only be exploited by local users with access to the system.