Description
The Installation Factory installation process for IBM WebSphere Application Server (WAS) 6.0.2 on Windows, when WAS is registered as a Windows service, allows local users to obtain sensitive information by reading the logs/instconfigifwas6.log log file.
References (3)
Core 3
Core References
Various Sources vendor-advisory
x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1PK67405
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/33849
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/48527
Scores
EPSS
0.0027
EPSS Percentile
19.2%
Details
CWE
CWE-200
Status
published
Products (1)
ibm/websphere_application_server
6.0.2
Published
Feb 10, 2009
Tracked Since
Feb 18, 2026