cpe:/a:ibm:websphere_message_broker:6.1 cpe:/a:ibm:websphere_message_broker:6.1.0.1 CVE-2009-0503 2009-02-13T12:30:00.703-05:00 2017-08-07T21:33:57.813-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2009-02-16T07:35:00.000-05:00 SECTRACK 1021735 BID 33819 VUPEN ADV-2009-0460 AIXAPAR IC55298 CONFIRM http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27011431 XF websphere-msgbroker-info-disclosure(48642) IBM WebSphere Message Broker 6.1.x before 6.1.0.2 writes a database connection password to the Event Log and System Log during exception handling for a JDBC error, which allows local users to obtain sensitive information by reading these logs.