Unscored CVE-2001-1189 EUVD-2001-1170GHSA-wp7h-8r27-qf8v

IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to…

Published Mar 15, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.

References

3682 vdb-entry
websphere-java-plaintext-passwords(7698) vdb-entry
20011213 IBM WebSphere on UNIX security alert ! mailing-list