CVE-2009-0897
Published May 21, 2009
Last updated 7 years ago
Overview
- Description
- IBM WebSphere Partner Gateway (WPG) 6.1.0 before 6.1.0.1 and 6.1.1 before 6.1.1.1 allows remote authenticated users to obtain sensitive information via vectors related to the "schema DB2 instance id" and the bcgarchive (aka the archiver script).
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:websphere_partner_gateway:6.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69E55335-9BDD-451B-A610-9389F072279D"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_partner_gateway:6.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC33F02F-2381-4A6F-B322-B22E416B6887"
}
],
"operator": "OR"
}
]
}
]