CVE-2008-7261 Information disclosure in n/a

Low 2.1 Published 20 Sep 2010 Updated 17 Sep 2024

Local attackers can read log files to obtain sensitive user credentials due to improper logging practices in IBM FileNet P8.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2008-7261?

CVE-2008-7261 is a low-severity vulnerability in n/a, published on 20 Sep 2010. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-010 records DEBUG messages containing user credentials in the log4j.xml file, which might allow local users to obtain sensitive information by reading this file.

Weakness: CWE-255

Which versions are affected by CVE-2008-7261?

It affects 1 product.

Products include Ibm Filenet P8 Application Engine.

How do I fix CVE-2008-7261?

No fix has been published for CVE-2008-7261 yet. Limit exposure of the affected software until one is available.

Is CVE-2008-7261 being exploited?

There is no known exploitation of CVE-2008-7261 in the wild and no public exploit code.

Sources

Also known as GHSA-qf8v-m53m-4pfw.