Security Dashboard
(Medium)
INFORMATION
 Name | : | CVE-2010-0563 | First Publication | : | 2010-02-08 |
| Severity | : | Medium | Last Modification | : | 2010-02-09 |
SCORING CVSS v2
| Cvss Base Score | : | 5 | Attack Range | : | Network |
| Cvss Impact Score | : | 2.9 | Attack Complexity | : | Low |
| Cvss Expoit Score | : | 10 | Authentification | : | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||||
DETAIL
The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers to obtain sensitive information by sniffing network sessions that were expected to be encrypted.
