CVE-2008-3235

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-07-21 · updated 2026-06-16
Weakness: CWE-255

Description

Unspecified vulnerability in the PropFilePasswordEncoder utility in the Security component in IBM WebSphere Application Server (WAS) 5.1 before 5.1.1.19 has unknown impact and attack vectors.

Affected products

IBM WebSphere Application Server: 5.1.0, 5.1.1, 5.1.1.1, 5.1.1.2, 5.1.1.3, 5.1.1.4 (+14)

References

http://secunia.com/advisories/31149
http://www-1.ibm.com/support/docview.wss?uid=swg1PK61436
http://www-1.ibm.com/support/docview.wss?uid=swg27006879
http://www.securityfocus.com/bid/30280
http://www.securitytracker.com/id?1020528
http://www.vupen.com/english/advisories/2008/2140/references
http://secunia.com/advisories/31149
http://www-1.ibm.com/support/docview.wss?uid=swg1PK61436
http://www-1.ibm.com/support/docview.wss?uid=swg27006879
http://www.securityfocus.com/bid/30280
http://www.securitytracker.com/id?1020528
http://www.vupen.com/english/advisories/2008/2140/references

Get alerted when CVE-2008-3235 or the next vulnerability affects your stack