IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://www.ibm.com/support/docview.wss?uid=swg1PM42436 | vendor advisory |
http://www.securityfocus.com/bid/48709 | vdb entry |
http://www.ibm.com/support/docview.wss?uid=swg1PM36620 | vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/68571 | vdb entry |