CVE-2009-1898
Summary
| CVE | CVE-2009-1898 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-06-03 17:00:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:L/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Websphere Application Server | 6.0.2 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.1 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.10 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.11 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.12 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.13 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.14 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.15 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.16 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.17 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.18 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.19 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.2 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.20 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.21 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.22 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.23 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.24 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.25 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.27 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.28 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.29 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.3 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.30 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.31 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.32 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.4 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.5 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.6 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.7 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.8 | All | All | All |
| Application | Ibm | Websphere Application Server | 6.0.2.9 | All | All | All |
| Application | Ibm | Websphere Application Server | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM notice: The page you requested cannot be displayed | af854a3a-2127-422b-91ae-364da2661108 | www-1.ibm.com | |
| IBM - Fix list for WebSphere Application Server Version 6.0.2 | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | Patch |
| IBM WebSphere Application Server Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| IBM WebSphere Application Server Multiple Security Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.