CVEvulnerability

CVE-2014-3060

10.0 HIGH Published 2014-10-02 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2014-10-02
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie.

Affected configurations

• ibm websphere datapower xc10 appliance firmware 2.5.0.0 • ibm websphere datapower xc10 appliance

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476 Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21685705 Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/93534 exchange.xforce.ibmcloud.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476 Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21685705 Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/93534 exchange.xforce.ibmcloud.com