CVE-2009-0899

MOYENNE 4.3CVE-2009-0899 · Published 03/06/2009 · updated 16/06/2026

En bref

CVE-2009-0899 est une vulnérabilité MOYENNE (CVSS 4.3) touchant integrated solutions console (ibm), websphere application server (ibm), websphere portal (ibm).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.6%, plus élevée que 75.9% des vulnérabilités.
Correctif : mettre à jour vers 6.0.0.0 ou plus récent.

Package	Affected versions	Patched versions
integrated solutions console ibm	`= 6.0.1`	No fix yet
websphere application server ibm	`≥ 6.1, ≤ 6.1.0.24≥ 7.0, ≤ 7.0.0.4`	No fix yet
websphere portal ibm	`≥ 5.1, < 6.0.0.0`	`6.0.0.0`

Description

IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console (ISC) 6.0.1 do not properly set the IsSecurityEnabled security flag during migration of WebSphere Member Manager (WMM) to Virtual Member Manager (VMM) and a Federated Repository, which allows attackers to obtain sensitive information from repositories via unspecified vectors.

References

www-01.ibm.com/support/docview.wss · Patch
www-1.ibm.com/support/docview.wss · Vendor Advisory
securityfocus.com/bid/35406 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/50882 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free