CVE-2009-2089

The Migration component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when tracing is enabled and a 6.1 to 7.0 migration has occurred, allows remote authenticated users to obtain sensitive information by reading a Migration Trace file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.1 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 44%
VendorProductVersion
ibmwebsphere_application_server
6.1
ibmwebsphere_application_server
6.1.0
ibmwebsphere_application_server
6.1.0.0
ibmwebsphere_application_server
6.1.0.1
ibmwebsphere_application_server
6.1.0.2
ibmwebsphere_application_server
6.1.0.3
ibmwebsphere_application_server
6.1.0.4
ibmwebsphere_application_server
6.1.0.5
ibmwebsphere_application_server
6.1.0.6
ibmwebsphere_application_server
6.1.0.7
ibmwebsphere_application_server
6.1.0.8
ibmwebsphere_application_server
6.1.0.9
ibmwebsphere_application_server
6.1.0.10
ibmwebsphere_application_server
6.1.0.11
ibmwebsphere_application_server
6.1.0.12
ibmwebsphere_application_server
6.1.0.13
ibmwebsphere_application_server
6.1.0.14
ibmwebsphere_application_server
6.1.0.15
ibmwebsphere_application_server
6.1.0.16
ibmwebsphere_application_server
6.1.0.17
ibmwebsphere_application_server
6.1.0.18
ibmwebsphere_application_server
6.1.0.19
ibmwebsphere_application_server
6.1.0.20
ibmwebsphere_application_server
6.1.0.21
ibmwebsphere_application_server
6.1.0.22
ibmwebsphere_application_server
6.1.0.23
ibmwebsphere_application_server
6.1.0.24
ibmwebsphere_application_server
7.0
ibmwebsphere_application_server
7.0.0.1
ibmwebsphere_application_server
7.0.0.3
ibmwebsphere_application_server
7.0.0.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration