CVE-2009-0438

published 2009-02-10

CVE-2009-0438: IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass "Authorization checking" and obtain sensitive information…

medium 5 CVSS 3.1

AV N AC L Au N C P I N A N

IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass "Authorization checking" and obtain sensitive information from JSP pages via a crafted request. NOTE: this is probably a duplicate of CVE-2008-5412.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_application_server	<= 7.0	—
ibm	websphere_application_server	—	—