CVE-2010-2323: Infoleak
Published Jun 18, 2010
·Updated
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the defaultcreate.log file that is associated with profile creation by the BBOWWPFx job and the zPMT.
Affected Software
12 affected components
IBM WebSphere Application Server<=7.0.0.10
IBM WebSphere Application Server=7.0
IBM WebSphere Application Server=7.0.0.1
IBM WebSphere Application Server=7.0.0.2
IBM WebSphere Application Server=7.0.0.3
IBM WebSphere Application Server=7.0.0.4
IBM WebSphere Application Server=7.0.0.5
IBM WebSphere Application Server=7.0.0.6
IBM WebSphere Application Server=7.0.0.7
IBM WebSphere Application Server=7.0.0.8
IBM WebSphere Application Server=7.0.0.9
IBM Zos
Event History
Jun 18, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-2323?
CVE-2010-2323 is rated as a moderate severity vulnerability due to the potential for sensitive information exposure.
2
How do I fix CVE-2010-2323?
To fix CVE-2010-2323, upgrade IBM WebSphere Application Server to version 7.0.0.11 or later.
3
What impact does CVE-2010-2323 have on IBM WebSphere Application Server?
CVE-2010-2323 allows attackers to read sensitive information from the default_create.log file.
4
Which versions of IBM WebSphere Application Server are affected by CVE-2010-2323?
CVE-2010-2323 affects IBM WebSphere Application Server versions prior to 7.0.0.11.
5
What kind of information can be leaked due to CVE-2010-2323?
CVE-2010-2323 can lead to the exposure of sensitive information related to profile creation.