CVE-2009-0437: IBM WebSphere Application Server

Low severity, CVSS 1.9. EPSS: 0.3% chance of exploitation in the next 30 days.

The Installation Factory installation process for IBM WebSphere Application Server (WAS) 6.0.2 on Windows, when WAS is registered as a Windows service, allows local users to obtain sensitive information by reading the logs/instconfigifwas6.log log file.

Affected products

• IBM WebSphere Application Server: version 6.0.2 only

Published 2009-02-10. Last modified 2026-06-16.