CVE-2010-1650
IBM WebSphere Application Server 6.0.x-6.0.2.40, 6.1.x-6.1.0.30, 7.0.x-7.0.0.10 - Information Disclosure
Title source: llmDescription
IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.41, 6.1.x before 6.1.0.31, and 7.0.x before 7.0.0.11, when the -trace option (aka debugging mode) is enabled, executes debugging statements that print string representations of unspecified objects, which allows attackers to obtain sensitive information by reading the trace output.
References (5)
Core 5
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39628
Patch vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/58323
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PM06839
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0994
Scores
EPSS
0.0030
EPSS Percentile
22.1%
Details
CWE
CWE-310
Status
published
Products (50)
ibm/websphere_application_server
6.0
ibm/websphere_application_server
6.0.0.1
ibm/websphere_application_server
6.0.0.2
ibm/websphere_application_server
6.0.0.3
ibm/websphere_application_server
6.0.1
ibm/websphere_application_server
6.0.1.1
ibm/websphere_application_server
6.0.1.2
ibm/websphere_application_server
6.0.1.3
ibm/websphere_application_server
6.0.1.5
ibm/websphere_application_server
6.0.1.7
... and 40 more
Published
May 03, 2010
Tracked Since
Feb 18, 2026