Unscored severity · published Feb 26, 2009
CVE-2009-0507
IBM WebSphere Process Server (WPS) 6.1.2 before 6.1.2.3 and 6.2 before 6.2.0.1 does not properly restrict configuration data during an export of the cluster configuration file…
–
CVSS
1%
EPSS
No
On KEV
Description
IBM WebSphere Process Server (WPS) 6.1.2 before 6.1.2.3 and 6.2 before 6.2.0.1 does not properly restrict configuration data during an export of the cluster configuration file from the administrative console, which allows remote authenticated users to obtain the (1) JMSAPI, (2) ESCALATION, and (3) MAILSESSION (aka mail session) cleartext passwords via vectors involving access to a cluster member.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WP
Websphere Process Server · Ibm
through 6.1.2.2; through 6.2; 6.1.2; 6.1.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0507
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0507
secunia.com
http://secunia.com/advisories/34249
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg27015580
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1JR30088
www.vupen.com
http://www.vupen.com/english/advisories/2009/0670
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/48892
More from Websphere Process Server
6.8
CVE-2015-7441
Remote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5 through…
5.4
CVE-2018-1384
IBM Business Process Manager 8.6 is vulnerable to cross-site scripting
4.3
CVE-2015-7454
Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2,…
–
CVE-2014-6176
IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5…