CVE-2010-1650: Low severity IBM WebSphere Application Server Feature Pack for Web Services vulnerability
Published Apr 30, 2010
·Updated
IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.41, 6.1.x before 6.1.0.31, and 7.0.x before 7.0.0.11, when the -trace option (aka debugging mode) is enabled, executes debugging statements that print string representations of unspecified objects, which allows attackers to obtain sensitive information by reading the trace output.
Affected Software
94 affected components
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.10
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.5
IBM WebSphere Application Server Feature Pack for Web Services=6.0.0.3
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.15
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.3
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.20
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.13
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.9
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.11
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.28
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.11
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.6
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.2
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.35
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.24
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.21
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.9
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.17
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.15
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.4
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.17
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.2
IBM WebSphere Application Server Feature Pack for Web Services=6.0.0.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.30
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.29
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.23
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.18
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.39
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.16
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.7
IBM WebSphere Application Server Feature Pack for Web Services=6.0.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.33
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.27
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.12
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.22
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.5
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.7
IBM WebSphere Application Server Feature Pack for Web Services=6.0
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.3
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.19
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.25
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.37
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.8
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.14
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.13
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.31
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.21
IBM WebSphere Application Server Feature Pack for Web Services=6.1.7
IBM WebSphere Application Server Feature Pack for Web Services=6.1
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.22
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.19
IBM WebSphere Application Server Feature Pack for Web Services=6.1.6
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.4
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.25
IBM WebSphere Application Server Feature Pack for Web Services=6.1.14
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.11
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.14
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.20
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.9
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.24
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.0
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.1
IBM WebSphere Application Server Feature Pack for Web Services=6.1.5
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.27
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.29
IBM WebSphere Application Server Feature Pack for Web Services=6.1.13
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.7
IBM WebSphere Application Server Feature Pack for Web Services=6.1.1
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.3
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.17
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.26
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.13
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.16
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.6
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.10
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.8
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.15
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.18
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.23
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.5
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.12
IBM WebSphere Application Server Feature Pack for Web Services=6.1.3
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.5
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.9
IBM WebSphere Application Server Feature Pack for Web Services=7.0
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.7
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.3
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.1
Remediation
Patch Available
Event History
Apr 30, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
May 3, 2010
Data Sourced
via NVD·01:51 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1650?
The severity of CVE-2010-1650 is classified as medium risk, due to the potential exposure of sensitive information.
2
How do I fix CVE-2010-1650?
To fix CVE-2010-1650, you should update your IBM WebSphere Application Server to version 6.0.2.41, 6.1.0.31, or 7.0.0.11 or later.
3
What versions of IBM WebSphere Application Server are affected by CVE-2010-1650?
CVE-2010-1650 affects IBM WebSphere Application Server versions 6.0.x before 6.0.2.41, 6.1.x before 6.1.0.31, and 7.0.x before 7.0.0.11.
4
What type of vulnerability is CVE-2010-1650?
CVE-2010-1650 is a vulnerability that allows attackers to obtain sensitive information due to improper handling of debugging output.
5
Can CVE-2010-1650 be exploited remotely?
Yes, CVE-2010-1650 can be exploited remotely if the debugging mode is enabled on affected IBM WebSphere Application Server versions.