| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | ≥ 6.1, < 6.1.0.43≥ 7.0, < 7.0.0.21≥ 8.0, < 8.0.0.2 | 6.1.0.437.0.0.218.0.0.2 |
The javax.naming.directory.AttributeInUseException class in the Virtual Member Manager in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.43, 7.0 before 7.0.0.21, and 8.0 before 8.0.0.2 does not properly update passwords on a configuration using Tivoli Directory Server, which might allow remote attackers to gain access to an application by leveraging knowledge of an old password. IBM X-Force ID: 72581.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free