CVE-2010-2326

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11, when addNode -trace is used during node federation, allows attackers to obtain sensitive information about CIMMetadataCollectorImpl trace actions by reading the addNode.log file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
VendorProductVersion
ibmwebsphere_application_server
7.0
ibmwebsphere_application_server
7.0.0.1
ibmwebsphere_application_server
7.0.0.3
ibmwebsphere_application_server
7.0.0.5
ibmwebsphere_application_server
7.0.0.7
ibmwebsphere_application_server
7.0.0.9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/40096
http://www-01.ibm.com/support/docview.wss?uid=swg1PM10684
http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830
http://www.osvdb.org/65438
http://www.securityfocus.com/bid/40699
http://www.vupen.com/english/advisories/2010/1411
http://secunia.com/advisories/40096
http://www-01.ibm.com/support/docview.wss?uid=swg1PM10684
http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830
http://www.osvdb.org/65438
http://www.securityfocus.com/bid/40699
http://www.vupen.com/english/advisories/2010/1411