CVE-2010-0563

https://notcve.org/view.php?id=CVE-2010-0563

08 Feb 2010 — The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers to obtain sensitive information by sniffing network sessions that were expected to be encrypted. La funcionalidad Single Sign-on (SSO) en IBM WebSphere Application Server (WAS) v7.0.0.0 a la v7.0.0.8, no reconoce la opción de configuración "Requires SSL", lo que podría permitir a atacantes remotos obtener informa... • http://secunia.com/advisories/38425 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •