PT-2018-4077
CVE-2013-2951
·
تاريخ النشر
2018-07-11
·
تاريخ التحديث
2018-09-06
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM WebSphere Portal versions 7.0.0.x through 8.0.0.x
Description
The issue allows local users to obtain sensitive information by reading a trace file when tracing is enabled for the Selfcare Portlet (Profile Management). This is because passwords are written to the trace file.
Recommendations
For versions 7.0.0.x through 8.0.0.x, consider disabling the tracing feature for the Selfcare Portlet (Profile Management) to prevent sensitive information from being written to the trace file. Restrict access to the trace file to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾