CVE-2009-0503: IBM WebSphere Message Broker

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM WebSphere Message Broker 6.1.x before 6.1.0.2 writes a database connection password to the Event Log and System Log during exception handling for a JDBC error, which allows local users to obtain sensitive information by reading these logs.

Affected products

• IBM WebSphere Message Broker: up to and including 6.1.0.1; version 6.1 only

Published 2009-02-13. Last modified 2026-06-16.