CVE-2008-5413

PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2009-0434.

• CWE-200

• http://www-01.ibm.com/support/docview.wss?uid=swg27014463Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1PK63886
• http://www.securityfocus.com/bid/32679Patch
• http://www.vupen.com/english/advisories/2008/3370Vendor Advisory
• http://www.vupen.com/english/advisories/2009/0423Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg27014463Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1PK63886
• http://www.securityfocus.com/bid/32679Patch
• http://www.vupen.com/english/advisories/2008/3370Vendor Advisory
• http://www.vupen.com/english/advisories/2009/0423Vendor Advisory

Published

Dec 10, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5407Multiple unspecified vulnerabilities in the Backup Exec remo…
• CVE-2008-5408Buffer overflow in the data management protocol in Symantec …
• CVE-2008-5409Unspecified vulnerability in the pdf.xmd module in (1) BitDe…
• CVE-2008-5410The PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun …
• CVE-2008-5411IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 send…
• CVE-2008-5412Unspecified vulnerability in IBM WebSphere Application Serve…
• CVE-2008-5414Unspecified vulnerability in the Feature Pack for Web Servic…
• CVE-2008-5415The LDBserver service in the server in CA ARCserve Backup 11…
• CVE-2008-5416Heap-based buffer overflow in Microsoft SQL Server 2000 SP4,…
• CVE-2008-5417HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha pla…
• CVE-2008-5418Directory traversal vulnerability in login.php in the PunPor…
• CVE-2008-5419Stack-based buffer overflow in SAN Manager Master Agent serv…