CVEvulnerability
CVE-2010-2644
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-12-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which allows remote attackers to perform governance actions via unspecified API requests to an EJB interface.
Affected configurations
• ibm websphere service registry and repository 7.0.0
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/42742 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ72563 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg24026132 www-01.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63640 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/42742 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ72563 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg24026132 www-01.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63640 exchange.xforce.ibmcloud.com