IBM WebSphere Application Server Single Sign On Security Bypass Vulnerability

Bugtraq ID:	36158
Class:	Design Error
CVE:	CVE-2009-2088
Remote:	Yes
Local:	No
Published:	Jul 27 2009 12:00AM
Updated:	Aug 26 2009 07:52PM
Credit:	IBM
Vulnerable:	IBM Websphere Application Server 7.0 3 IBM Websphere Application Server 6.1 .23 IBM Websphere Application Server 6.1 .22 IBM Websphere Application Server 6.1 .21 IBM Websphere Application Server 6.1 .20 IBM Websphere Application Server 6.1 .2 IBM Websphere Application Server 6.1 .2 IBM Websphere Application Server 6.1 .19 IBM Websphere Application Server 6.1 .18 IBM Websphere Application Server 6.1 .17 IBM Websphere Application Server 6.1 .15 IBM Websphere Application Server 6.1 .14 IBM Websphere Application Server 6.1 .13 IBM Websphere Application Server 6.1 .12 IBM Websphere Application Server 6.1 .11 IBM Websphere Application Server 6.1 .10 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 7.0.0.1 IBM Websphere Application Server 7.0

Not Vulnerable:	IBM Websphere Application Server 6.1 .25 IBM Websphere Application Server 7.0.0.5