CVE-2011-5066: Infoleak
The SibRaRecoverableSiXaResource class in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 does not properly handle a Service Integration Bus (SIB) dump operation involving the First Failure Data Capture (FFDC) introspection code, which allows local users to obtain sensitive information by reading the FFDC log file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-5066?
CVE-2011-5066 is categorized as a moderate severity vulnerability.
How do I fix CVE-2011-5066?
To mitigate CVE-2011-5066, upgrade your IBM WebSphere Application Server to version 6.1.0.41 or later.
What versions of IBM WebSphere Application Server are affected by CVE-2011-5066?
CVE-2011-5066 affects IBM WebSphere Application Server versions 6.1 up to 6.1.0.40.
Can CVE-2011-5066 be exploited remotely?
CVE-2011-5066 is known to allow local users exploitation, not remote.
What component is primarily affected by CVE-2011-5066?
The vulnerability mainly affects the Default Messaging Component in IBM WebSphere Application Server.