CVE-2006-2436

HIGH 7.5CVE-2006-2436 · Published 17/05/2006 · updated 16/06/2026

In short

CVE-2006-2436 is a HIGH (CVSS 7.5) vulnerability affecting websphere application server (ibm).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
websphere application server ibm	`= 5.0.0= 5.0.1= 5.0.2`	No fix yet

Description

WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.

References

archives.neohapsis.com/archives/bugtraq/2006-05/0175.html · Patch
secunia.com/advisories/20032 · Patch
securityreason.com/securityalert/910
www-1.ibm.com/support/docview.wss · Patch
www-1.ibm.com/support/search.wss · Patch
vupen.com/english/advisories/2006/1736

More vulnerabilities in websphere application server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

websphere application server

ibm

= 5.0.0= 5.0.1= 5.0.2

No fix yet

More vulnerabilities in websphere application server

See all →