CVE-2008-3235

IBM WebSphere Application Server <5.1.1.19 PropFilePasswordEncoder - Impact Unknown

Title source: manual
STIX 2.1

Description

Unspecified vulnerability in the PropFilePasswordEncoder utility in the Security component in IBM WebSphere Application Server (WAS) 5.1 before 5.1.1.19 has unknown impact and attack vectors.

References (6)

Core 6
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2140/references
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31149
Various Sources x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg27006879
Various Sources vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1PK61436
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1020528
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/30280

Scores

EPSS 0.0177
EPSS Percentile 75.8%

Details

CWE
CWE-255
Status published
Products (20)
ibm/websphere_application_server 5.1.0
ibm/websphere_application_server 5.1.1
ibm/websphere_application_server 5.1.1.1
ibm/websphere_application_server 5.1.1.2
ibm/websphere_application_server 5.1.1.3
ibm/websphere_application_server 5.1.1.4
ibm/websphere_application_server 5.1.1.5
ibm/websphere_application_server 5.1.1.6
ibm/websphere_application_server 5.1.1.7
ibm/websphere_application_server 5.1.1.8
... and 10 more
Published Jul 21, 2008
Tracked Since Feb 18, 2026