CVE-2010-1651

no score yetEPSS 0.3%

IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing (aka full trace logging for SIP) are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by reading the trace log.

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-310
Published: 2010-05-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:websphere_application_server

References

http://secunia.com/advisories/39628
http://secunia.com/advisories/40096
http://www-01.ibm.com/support/docview.wss?uid=swg1PM08892
http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247
http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829

Check your stack JSON