Description
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the default_create.log file that is associated with profile creation by the BBOWWPFx job and the zPMT.
References
- ADV-2010-1411 vdb-entry
- PM15830 vendor-advisory
- 40096 third-party-advisory
- PM10454 vendor-advisory