PT-2019-17084 · Ibm · Ibm Websphere Application Server

Lukasz Plonka

·

CVE-2019-4441

·

Published

2019-10-03

·

Updated

2022-12-07

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 9.0
Description A remote attacker could obtain sensitive information when a stack trace is returned in the browser.
Recommendations For IBM WebSphere Application Server versions 7.0 through 9.0, update to a version that does not return stack traces in the browser to prevent sensitive information disclosure.

Fix

Generation of Error Message Containing Sensitive Information

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2019-4441

Affected Products

Ibm Websphere Application Server