CVE-2008-0740: IBM WebSphere Application Server

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartext information to http_plugin.log, which might allow local users to obtain sensitive information by reading this file.

Affected products

• IBM WebSphere Application Server: up to and including 6.0.2.24

Published 2008-02-13. Last modified 2026-06-16.