CVE-2006-2436
WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP...
WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.
Exploit likelihood
What each source reports
NVD Score used
WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.
- Record
CVE-2006-2436- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.
- Record
CVE-2006-2436- Updated
- 2026-11-02
EUVDEUVD-2006-2437 No score
WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.
- Record
EUVD-2006-2437- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v9vw-jj54-2r8v No score
WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP...
WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.
- Record
GHSA-v9vw-jj54-2r8v- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2436 is a high vulnerability (CVSS 7.5) in Ibm Websphere Application Server, published May 17, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.98%, the 80th percentile. No source names a fixed version.
References
www-1.ibm.com/support/search.wss?rs=0&q=PK17589&apar=only
securityreason.com/securityalert/910
vupen.com/english/advisories/2006/1736
secunia.com/advisories/20032
archives.neohapsis.com/archives/bugtraq/2006-05/0175.html
nvd.nist.gov/vuln/detail/CVE-2006-2436
github.com/advisories/GHSA-v9vw-jj54-2r8v