CVE-2009-1898

Description

The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network.

Risk Information

Base Score

5.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.463

Associated Vulnerability

Vulnerability	OS Platform
Update websphere_application_server 6.0.2.9 to latest version	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234