CVE-2018-1621

published 2018-07-06

CVE-2018-1621: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling…

medium 6.7 CVSS 3.0

AV L AC L PR H UI N S U C H I H A H

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. IBM X-Force ID: 144346.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—

CWE-312