IBM WebSphere JSP Root Password Disclosure Vulnerability
|
Bugtraq ID:
|
3682
|
|
Class:
|
Design Error
|
|
CVE:
|
CVE-2001-1189
|
|
Remote:
|
No
|
|
Local:
|
Yes
|
|
Published:
|
Dec 13 2001 12:00AM
|
|
Updated:
|
Jul 11 2009 09:06AM
|
|
Credit:
|
This vulnerability was submitted to BugTraq on December 13th, 2001 by Heikki Tunkelo <heikki.tunkelo@erln.gepas.de>.
|
|
Vulnerable:
|
IBM Websphere Application Server 3.5.3
-
IBM AIX 4.3
-
Linux kernel 2.3 .x
-
Microsoft Windows NT 4.0
-
Sun Solaris 8_sparc
IBM Websphere Application Server 3.5.2
-
IBM AIX 4.3
-
Linux kernel 2.3 .x
-
Microsoft Windows NT 4.0
-
Sun Solaris 8_sparc
IBM Websphere Application Server 3.5.1
-
IBM AIX 4.3
-
Linux kernel 2.3 .x
-
Microsoft Windows NT 4.0
-
Sun Solaris 8_sparc
IBM Websphere Application Server 3.5
IBM Websphere Application Server 3.0.2 .1
-
IBM AIX 4.3
-
Linux kernel 2.3 .x
-
Microsoft Windows NT 4.0
-
Sun Solaris 8_sparc
IBM Websphere Application Server 3.0.2
-
IBM AIX 4.3
-
Linux kernel 2.3 .x
-
Microsoft Windows NT 4.0
-
Sun Solaris 8_sparc
IBM Websphere Application Server 3.0 .2.4
-
IBM AIX 4.3
-
Linux kernel 2.3 .x
-
Microsoft Windows NT 4.0
-
Sun Solaris 8_sparc
IBM Websphere Application Server 3.0 .2.3
-
IBM AIX 4.3
-
Linux kernel 2.3 .x
-
Microsoft Windows NT 4.0
-
Sun Solaris 8_sparc
IBM Websphere Application Server 3.0 .2.2
-
IBM AIX 4.3
-
Linux kernel 2.3 .x
-
Microsoft Windows NT 4.0
-
Sun Solaris 8_sparc
IBM Websphere Application Server 3.0
-
IBM AIX 4.3
-
Linux kernel 2.3 .x
-
Microsoft Windows NT 4.0
-
Novell Netware 5.0
-
Sun Solaris 8_sparc
|
|
|
|
Not Vulnerable:
|
|
|