CoreCVE
Back

MEDIUM

IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2) providing an empty password

Published Feb 14, 2011

Description

IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2) providing an empty password.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 14, 2011
Updated Sep 17, 2024
Reserved Feb 14, 2011
Link CVE-2008-7274
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2008-7274
Red Hat
Severity n/a
Public date n/a
Links CVE-2008-7274
ENISA EUVD
Assigner mitre
Published Feb 14, 2011
Updated Sep 17, 2024
Exploited since n/a
Link EUVD-2008-7227
EUVD-2008-7227