CVE-2009-0434

PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before…

published February 10, 2009

CVSS
—
EPSS
0%
Percentile
23.9
In the wild
Unconfirmed
What it is

PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before 7.0.0.1, when Performance Monitoring Infrastructure (PMI) is enabled, allows local users to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2008-5413.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00321 · 23.9th percentile
Published
2009-02-10T22:13Z
EPSS history
Timeline
  • 10 FEB 22:13Z
    PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before…
    cvelistv5