IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartext information to http_plugin.log, which might allow local users to obtain sensitive information by reading this file.

IBM WebSphere Application Server 6.1 before Fix Pack 15 appears to be running on the remote host.  As such, it is reportedly affected by the following vulnerabilities :

  - There is an as-yet unspecified security exposure in     wsadmin (PK45726).

  - Sensitive information might appear in plaintext in the     http_plugin.log file (PK48785).

  - There is an as-yet unspecified potential security     exposure in the 'PropFilePasswordEncoder' utility     (PK52709).

  - There is an as-yet unspecified potential security     exposure with 'serveServletsByClassnameEnabled'     (PK52059).

  - Sensitive information may appear in plaintext in     startserver.log (PK53198).

  - If Fix Pack 9 has been installed, attackers can perform     an internal application hashtable login by either not     providing a password or providing an empty password     when the JAAS Login functionality is enabled.
    (PK54565)

IBM WebSphere Application Server 6.0.x before Fix Pack 25 appears to be running on the remote host.  Such versions are reportedly affected by multiple vulnerabilities. 

  - An unspecified vulnerability in the Administrative     Console involving monitor role users. (PK45768)

  - WebSphere Application Server writes unspecified     plaintext information to 'http_plugin.log' which might     allow attackers to obtain sensitive information.
    (PK48785)

  - An unspecified vulnerability in the     'PropFilePasswordEncoder' utility. (PK52709)

  - A header buffer-handling vulnerability with unspecified     impact. (PK57746)

  - An unspecified vulnerability in the 'UOWManager'.
    (PK51392)

IBM WebSphere Application Server 6.1 before Fix Pack 15 appears to be running on the remote host.  Such versions are reportedly affected by the following vulnerabilities :

 - There is an unspecified security exposure in wsadmin (PK45726).

 - Sensitive information might appear in clear text in the http_plugin.log file (PK48785).

 - There is an unspecified potential security exposure in the 'PropFilePasswordEncoder' utility (PK52709).

 - There is an unspecified potential security exposure with 'serveServletsByClassnameEnabled' (PK52059).

 - Sensitive information may appear in plain text in startserver.log (PK53198).

The remote server is a WebSphere application server.
This version is reported to be vulnerable to a number of flaws.  First, there is a reported flaw in the way that the administrative console monitors role users.  Second, there is a buffer overflow in the default messaging component.  Third, there is an unspecified flaw in the Java Transaction service.  Fourth, there is an information disclosure flaw in the 'http_plugin.log' file.  Fifth, there is an information disclosure flaw in the 'PropFilePasswordEncoder' utility.  The details of these flaws are currently unknown; however, the vendor has released a patch to address these issues.

ID	Name	Product	Family	Severity
45422	IBM WebSphere Application Server < 6.1.0.15 Multiple Vulnerabilities	Nessus	Web Servers	high
45419	IBM WebSphere Application Server 6.0 < 6.0.2.25 Multiple Vulnerabilities	Nessus	Web Servers	critical
4424	IBM WebSphere Application Server < 6.1.0.15 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	high
4355	WebSphere Application Server < 6.0.2.25 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	medium

Detections

Analytics

CVE-2008-0740

medium

Tenable Plugins

high

critical

high

medium