IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when session trace is enabled, records a full URL including the queryString in the trace logs when an application encodes a URL, which could allow attackers to obtain sensitive information.

SunOS 5.10_x86: Solaris Management Console.
Date this patch was last updated by Sun : Apr/02/10

This plugin has been deprecated and either replaced with individual 121309 patch-revision plugins, or deemed non-security related.

SunOS 5.10: Solaris Management Console Pat.
Date this patch was last updated by Sun : Apr/02/10

This plugin has been deprecated and either replaced with individual 121308 patch-revision plugins, or deemed non-security related.

SunOS 5.9_x86: /usr/sadm/lib/smc/lib/preload/jsdk21.jar patch.
Date this patch was last updated by Sun : Sep/15/05

SunOS 5.9: /usr/sadm/lib/smc/lib/preload/jsdk21.jar patch.
Date this patch was last updated by Sun : Sep/15/05

ID	Name	Product	Family	Severity
20276	Solaris 10 (x86) : 121309-20 (deprecated)	Nessus	Solaris Local Security Checks	critical
20273	Solaris 10 (sparc) : 121308-20 (deprecated)	Nessus	Solaris Local Security Checks	critical
13633	Solaris 9 (x86) : 116808-02	Nessus	Solaris Local Security Checks	medium
13576	Solaris 9 (sparc) : 116807-02	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2005-3498

high

Tenable Plugins

critical

critical

medium

medium