Unrated severityNVD Advisory· Published Nov 4, 2005· Updated Jun 16, 2026
CVE-2005-3498
CVE-2005-3498
Description
IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when session trace is enabled, records a full URL including the queryString in the trace logs when an application encodes a URL, which could allow attackers to obtain sensitive information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*range: >=5.0.0,<5.02.15
- (no CPE)range: 5.0.x < 5.02.15 / 5.1.x < 5.1.1.8 / 6.x < V6.0.2.5
Patches
Vulnerability mechanics
References
5- securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www-1.ibm.com/support/docview.wssnvdVendor Advisory
- www-1.ibm.com/support/docview.wssnvdVendor Advisory
- www.securityfocus.com/bid/15303nvdThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2005/2291nvdPermissions RequiredThird Party Advisory
News mentions
0No linked articles in our index yet.