CVE:CVE-2008-0740
CNNVD:CNNVD-200802-213
IBM webSphere Application Server (WAS) 6.0.2 Fix Pack 25 (6.0.2.25)之前版本和Fix Pack 15 (6.1.0.15)之前的6.1版本把未明明文信息写进http_plugin.log。本地用户可通过读取该文件获得敏感信息。
solution:Upgrade ibm websphere_application_server to a higher version than 6.0.2.24,and avoid the version (,6.0.2.24]