CVE-2005-3498

published 2005-11-04

CVE-2005-3498: IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when session trace is enabled, records a full URL…

Priority P4 21 medium 4.3 CVSS 2.0

AV N AC M Au N C P I N A N

EXPLOIT

IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when session trace is enabled, records a full URL including the queryString in the trace logs when an application encodes a URL, which could allow attackers to obtain sensitive information.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_application_server	>= 5.0.0 < 5.02.15	5.02.15
ibm	websphere_application_server	>= 5.1.0 < 5.1.1.8	5.1.1.8
ibm	websphere_application_server	>= 6.0.0 < 6.0.2.5	6.0.2.5

Detection & IOCs extracted from sources · hover to see the quote

• → Session trace logging in IBM WebSphere Application Server exposes full URLs including query strings (which may contain sensitive data such as session tokens or credentials) in trace logs when URL encoding is performed by the application ↗

• · Vulnerability is only exploitable when session trace is enabled on IBM WebSphere Application Server; affected versions are 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5 ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200