← Back to CVEs

CVE-2010-0563

N/A

Description

The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers to obtain sensitive information by sniffing network sessions that were expected to be encrypted.

CVE Details

CVSS v3.1 ScoreN/A

Published2/8/2010

Last Modified4/29/2026

Sourcenvd

Honeypot Sightings0

Affected Products

ibm:websphere_application_server

Weaknesses (CWE)

CWE-200

References

http://secunia.com/advisories/38425(cve@mitre.org)

http://securitytracker.com/id?1023551(cve@mitre.org)

http://www-01.ibm.com/support/docview.wss?uid=swg21417839(cve@mitre.org)

http://www-1.ibm.com/support/docview.wss?uid=swg1PM00610(cve@mitre.org)

http://www.osvdb.org/62140(cve@mitre.org)

http://www.securityfocus.com/bid/38122(cve@mitre.org)

http://secunia.com/advisories/38425(af854a3a-2127-422b-91ae-364da2661108)

http://securitytracker.com/id?1023551(af854a3a-2127-422b-91ae-364da2661108)

http://www-01.ibm.com/support/docview.wss?uid=swg21417839(af854a3a-2127-422b-91ae-364da2661108)

http://www-1.ibm.com/support/docview.wss?uid=swg1PM00610(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/62140(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/38122(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.