CVEvulnerability
CVE-2009-0906
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-08-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors.
Affected configurations
• ibm websphere application server 1.0
• ibm websphere application server 1.0.0.2
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://secunia.com/advisories/36306 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27015429 Patch
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK86047 www-1.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52074 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/36306 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27015429 Patch
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK86047 www-1.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52074 exchange.xforce.ibmcloud.com