Some vulnerabilities and security issues have been reported in IBM WebSphere Application Server, some of which have unknown impacts while others can potentially be exploited by malicious, local users to gain knowledge of sensitive information.

1) An unspecified error exists in wsadmin within the Administrative Scripting Tools component. No further information is currently available.

2) An unspecified error exists within the PropFilePasswordEncoder utility. No further information is currently available.

3) The problem is that certain sensitive information are stored in clear text within the http_plugin.log file (Plug-in component) and startserver.log (System Management/Repository component).

Solution
Apply Fix Pack 15 (6.1.0.15).

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
IBM (PK45726, PK48785, PK52709, PK53198):
http://www.ibm.com/support/docview.wss?uid=swg27007951

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area