CVE-2010-1651

IBM WebSphere Application Server 6.1.x < 6.1.0.31 and 7.0.x < 7.0.0.11 - Information Disclosure via SIP Trace Logging

Title source: llm
STIX 2.1

Description

IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing (aka full trace logging for SIP) are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by reading the trace log.

References (8)

Core 8
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1411
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39628
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/58324
Patch vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/65437
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40096
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PM08892

Scores

EPSS 0.0033
EPSS Percentile 25.4%

Details

CWE
CWE-310
Status published
Products (44)
ibm/websphere_application_server 6.1
ibm/websphere_application_server 6.1.0
ibm/websphere_application_server 6.1.0.0
ibm/websphere_application_server 6.1.0.1
ibm/websphere_application_server 6.1.0.2
ibm/websphere_application_server 6.1.0.3
ibm/websphere_application_server 6.1.0.4
ibm/websphere_application_server 6.1.0.5
ibm/websphere_application_server 6.1.0.6
ibm/websphere_application_server 6.1.0.7
... and 34 more
Published May 03, 2010
Tracked Since Feb 18, 2026