Vulnerability Development mailing list archives

IBM WebSPhere 3.5


From: Rodrick Brown <Rodrick_Brown () NEWYORKLIFE COM>
Date: Thu, 26 Oct 2000 13:04:57 -0400

Anyone here know of any known bugs with IBM Websphere 3.5 I have noticed that
default installations
there is no security when using the administrative console, any user can connect
through admin console without a password.
Ive also noticed that OS level security can only work if your running Websphere
as root, and from what I have diagnose this is what most
people are doing. When trying to configure Websphere to run as non root it seems
to only work with LDAP which isn't feasible in most
small->medium size environments, just my 2c. any feedback will be really
appreciated.

IBM Websphere can be downloaded for NT, AIX, & Solaris with a 60 day trail.


- Rodrick Brown
- Systems Programming Specialist
- New York Life Insurance
- http://www.newyorklife.com
- Office - (212) 790-1228


Current thread: