Skip to content
OpenAdvisories
Unscored CVE-2011-5066 EUVD-2011-4966GHSA-hcc5-5wqj-6mg5

The SibRaRecoverableSiXaResource class in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 doe…

Published Jan 15, 2012 · Updated Sep 16, 2024 · Assigned by mitre

Description

The SibRaRecoverableSiXaResource class in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 does not properly handle a Service Integration Bus (SIB) dump operation involving the First Failure Data Capture (FFDC) introspection code, which allows local users to obtain sensitive information by reading the FFDC log file.

References