CVEvulnerability
CVE-2014-3070
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The addFileRegistryAccount Virtual Member Manager (VMM) SPI Admin Task in IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3 does not properly create accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
Affected configurations
• ibm websphere application server 8.5.0.0
• ibm websphere application server 8.5.0.1
• ibm websphere application server 8.5.0.2
• ibm websphere application server 8.5.5.0
• ibm websphere application server 8.5.5.1
• ibm websphere application server 8.5.5.2
• ibm websphere application server 8.0.0.0
• ibm websphere application server 8.0.0.1
• ibm websphere application server 8.0.0.2
• ibm websphere application server 8.0.0.3
• ibm websphere application server 8.0.0.4
• ibm websphere application server 8.0.0.5
• ibm websphere application server 8.0.0.6
• ibm websphere application server 8.0.0.7
• ibm websphere application server 8.0.0.8
• ibm websphere application server 8.0.0.9
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI16765 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21681249 Vendor Advisory
- http://www.securityfocus.com/bid/69296 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93777 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI16765 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21681249 Vendor Advisory
- http://www.securityfocus.com/bid/69296 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93777 exchange.xforce.ibmcloud.com