Improper Configuration Data Restriction in IBM WebSphere Process Server
CVE-2009-0507
Currently unrated
What is CVE-2009-0507?
IBM WebSphere Process Server versions 6.1.2 prior to 6.1.2.3 and 6.2 prior to 6.2.0.1 have a vulnerability that allows remote authenticated users to access sensitive configuration data. This issue arises from insufficient restrictions on exported cluster configuration files through the administrative console, resulting in the exposure of cleartext passwords for JMSAPI, ESCALATION, and MAILSESSION components. Attackers with valid credentials can exploit this vulnerability to glean sensitive information, posing a significant security risk.