CVE-2005-3498

HTTP Options Detection

Title source: github.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2005-3498 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.

Description

IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when session trace is enabled, records a full URL including the queryString in the trace logs when an application encodes a URL, which could allow attackers to obtain sensitive information.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

MetasploitHTTP Options DetectionMetasploit auxiliary PoCby CG <cg@carnal0wnage.com>Not analyzed1 file

Ruby · linked to 2 vulnerabilities

Metasploit
PoC details

References

6