Description
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-domain support is configured, does not purge password data from the authentication cache, which has unspecified impact and remote attack vectors.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2012-3284 | IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-domain support is configured, does not purge password data from the authentication cache, which has unspecified impact and remote attack vectors. |
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2024-08-06T19:57:50.464Z
Reserved: 2012-06-07T00:00:00.000Z
Link: CVE-2012-3306
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2012-09-25T20:55:01.173
Modified: 2025-04-11T00:51:21.963
Link: CVE-2012-3306
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses