CVE-2009-0899: IBM Integrated Solutions Console

Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days.

IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console (ISC) 6.0.1 do not properly set the IsSecurityEnabled security flag during migration of WebSphere Member Manager (WMM) to Virtual Member Manager (VMM) and a Federated Repository, which allows attackers to obtain sensitive information from repositories via unspecified vectors.

Affected products

• IBM Integrated Solutions Console: version 6.0.1 only
• IBM WebSphere Application Server: from 6.1, up to and including 6.1.0.24; from 7.0, up to and including 7.0.0.4
• IBM WebSphere Portal: from 5.1, before 6.0.0.0 (fixed in 6.0.0.0)

Published 2009-06-03. Last modified 2026-06-16.