PT-2019-17100 · Ibm · Ibm Websphere Application Server

CVE-2019-4477

·

Publicado

2019-09-17

·

Atualizado

2022-12-07

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 9.0
Description The issue allows a user with access to audit logs to obtain sensitive information due to improper handling of command line options.
Recommendations For IBM WebSphere Application Server versions 7.0 through 9.0, update to a version that properly handles command line options to prevent sensitive information disclosure.

Correção

Improper Privilege Management

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2019-4477

Produtos afetados

Ibm Websphere Application Server