Unrated severityNVD Advisory· Published Nov 4, 2005· Updated Apr 16, 2026
CVE-2005-3498
CVE-2005-3498
Description
IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when session trace is enabled, records a full URL including the queryString in the trace logs when an application encodes a URL, which could allow attackers to obtain sensitive information.
Affected products
1- cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*Range: >=5.0.0,<5.02.15
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www-1.ibm.com/support/docview.wssnvdVendor Advisory
- www-1.ibm.com/support/docview.wssnvdVendor Advisory
- www.securityfocus.com/bid/15303nvdThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2005/2291nvdPermissions RequiredThird Party Advisory
News mentions
0No linked articles in our index yet.