Description
IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.41, 6.1.x before 6.1.0.31, and 7.0.x before 7.0.0.11, when the -trace option (aka debugging mode) is enabled, executes debugging statements that print string representations of unspecified objects, which allows attackers to obtain sensitive information by reading the trace output.
References
- 39628 third-party-advisory
- PM12247 vendor-advisory
- ibm-was-debugging-information-disclosure(58323) vdb-entry
- PM06839 vendor-advisory
- ADV-2010-0994 vdb-entry