VULNERABILITY INTELLIGENCE
CVE-2009-0434
CVSS score1.9 LOW
EPSS probability0.32%
CISA KEVNot currently listed
Published2009-02-10
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:N/A:N
Description
PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before 7.0.0.1, when Performance Monitoring Infrastructure (PMI) is enabled, allows local users to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2008-5413.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor