CVE-2001-1189: Medium – IBM Websphere Application Server 3.5.3 and earlier stores a password

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2001. A medium severity vulnerability affects Ibm systems (CVE-2001-1189). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2001-GLOBAL-310046-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →

Frequently Asked Questions

What is CVE-2001-1189?

This vulnerability was disclosed in 2001. A medium severity vulnerability affects Ibm systems (CVE-2001-1189). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

What is the CVSS score for CVE-2001-1189?

CVE-2001-1189 has CVSS 4.6 (Medium). Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P. EPSS: 0.3%.

Is CVE-2001-1189 actively exploited?

No confirmed active exploitation of CVE-2001-1189 as of 2026-05-30.

How do I remediate CVE-2001-1189?

Priority: MONITOR. PSIRT: [email protected]

What systems are affected by CVE-2001-1189?

CVE-2001-1189 affects Ibm Websphere Application Server.

Vulnerability Details

CVE ID	`CVE-2001-1189`
BSID	`BS-2001-GLOBAL-310046-M` BreachSpider Global ID
CVSS Vector	`AV:L/AC:L/Au:N/C:P/I:P/A:P`
Published	2001-12-13
Last Modified	2026-04-16
ICS Relevance	0%
Source	NVD

Official Description

IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script. CVSS vector: AV:L/AC:L/Au:N/C:P/I:P/A:P.

Exploitation Likelihood: MINIMAL

Affected Products

Vendor	Product	Affected Versions
Ibm	Websphere Application Server	`3.0` `3.0.2` `3.0.2.1` `3.0.2.2` `3.0.2.3` `3.0.2.4` +4 more `3.5` `3.5.1` `3.5.2` `3.5.3`

Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]

Threat Intelligence

● Threat Intelligence Validated: October 2026 | Threat Age: 9073 Days

CISA known-exploited	Not in KEV catalog
Public Exploit	Not confirmed
PoC Code	Not confirmed

AI Enrichment Record — provenance & audit hash

Model	`rule-based-v1`
Confidence	MEDIUM
Enriched At	2026-05-24
SHA-512 Audit Hash	`e1dcf90096da587b1b355fd20e47ece1bd94e42955e506a0e5f499ee90db1684f0b63ec3ba35594459bc2d5788e8f2eff39f8a3d8f508bece513b7093a5e9302`

Related CVEs affecting Ibm

CVE-2009-3032 10.0 Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyV... CVE-2007-3676 10.0 IBM DB2 Universal Database (UDB) Administration Server (DAS) 8 before Fix Pac... CVE-1999-1119 10.0 FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, ... CVE-1999-0099 10.0 Buffer overflow in syslog utility allows local or remote attackers to gain ro... CVE-1999-0042 10.0 Buffer overflow in University of Washington's implementation of IMAP and POP servers.

View all Ibm CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →