Vulnerability CVE-2009-0897
Published: 2009-05-21   Modified: 2012-02-13

Description:
IBM WebSphere Partner Gateway (WPG) 6.1.0 before 6.1.0.1 and 6.1.1 before 6.1.1.1 allows remote authenticated users to obtain sensitive information via vectors related to the "schema DB2 instance id" and the bcgarchive (aka the archiver script).

Type:

CWE-Other

CVSS2 => (AV:N/AC:L/Au:S/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4/10
2.9/10
8/10
Exploit range
Attack complexity
Authentication
Remote
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
IBM -> Websphere partner gateway 

 References:
http://www-01.ibm.com/support/docview.wss?uid=swg21366016
http://xforce.iss.net/xforce/xfdb/50643
http://www.securityfocus.com/bid/35136
Copyright 2024, cxsecurity.com

 

Back to Top