Description (CNA)
The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers to obtain sensitive information by sniffing network sessions that were expected to be encrypted.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://securitytracker.com/id?1023551
- http://www-01.ibm.com/support/docview.wss?uid=swg21417839
- http://www-1.ibm.com/support/docview.wss?uid=swg1PM00610
- http://www.securityfocus.com/bid/38122
- http://secunia.com/advisories/38425
- http://www.osvdb.org/62140
ADP enrichment
No English description supplied.