CVEvulnerability
CVE-2014-4767
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature installation, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
Affected configurations
• ibm websphere application server 8.5.0.0
• ibm websphere application server 8.5.0.1
• ibm websphere application server 8.5.0.2
• ibm websphere application server 8.5.5.0
• ibm websphere application server 8.5.5.1
• ibm websphere application server 8.5.5.2
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI21284 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21681249 Vendor Advisory
- http://www.securityfocus.com/bid/69297 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94832 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI21284 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21681249 Vendor Advisory
- http://www.securityfocus.com/bid/69297 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94832 exchange.xforce.ibmcloud.com