IBM WebSphere Application Server CVE-2019-4269 Information Disclosure Vulnerability

Bugtraq ID:	109000
Class:	Design Error
CVE:	CVE-2019-4269
Remote:	Yes
Local:	No
Published:	Jun 26 2019 12:00AM
Updated:	Jun 26 2019 12:00AM
Credit:	IBM
Vulnerable:	IBM Websphere Application Server 9.0.0.9 IBM Websphere Application Server 9.0.0.8 IBM Websphere Application Server 9.0.0.7 IBM Websphere Application Server 9.0.0.6 IBM Websphere Application Server 9.0.0.5 IBM Websphere Application Server 9.0.0.4 IBM Websphere Application Server 9.0.0.3 IBM Websphere Application Server 9.0.0.2 IBM Websphere Application Server 9.0.0.11 IBM Websphere Application Server 9.0.0.10 IBM Websphere Application Server 9.0.0.1 IBM Websphere Application Server 9.0
Not Vulnerable:	IBM Websphere Application Server 9.0.5.0

IBM WebSphere Application Server CVE-2019-4269 Information Disclosure Vulnerability

IBM WebSphere Application Server is prone to an information disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.

IBM WebSphere Application Server CVE-2019-4269 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere Application Server CVE-2019-4269 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM WebSphere Application Server CVE-2019-4269 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• Information disclosure in WebSphere Application Server Admin Console (CVE-2019-4 (IBM)