CVE-2009-0432: IBM WebSphere Application Server

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19 does not enable the secure version, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected products

• IBM WebSphere Application Server: version 6.1.0.1 only; version 6.1.0.2 only; version 6.1.0.3 only; version 6.1.0.5 only; version 6.1.0.7 only; version 6.1.0.9 only; …

Published 2009-02-10. Last modified 2026-06-16.