Vulnerability Details CVE-2010-2326
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11, when addNode -trace is used during node federation, allows attackers to obtain sensitive information about CIMMetadataCollectorImpl trace actions by reading the addNode.log file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.4%
CVSS Severity
CVSS v2 Score 4.3
References
- http://secunia.com/advisories/40096
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM10684
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830
- http://www.osvdb.org/65438
- http://www.securityfocus.com/bid/40699
- http://www.vupen.com/english/advisories/2010/1411
- http://secunia.com/advisories/40096
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM10684
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830
- http://www.osvdb.org/65438
- http://www.securityfocus.com/bid/40699
- http://www.vupen.com/english/advisories/2010/1411
Products affected by CVE-2010-2326
-
cpe:2.3:a:ibm:websphere_application_server:7.0
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.1
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.3
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.5
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.7
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.9