CVEvulnerability
CVE-2014-6160
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-12-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not properly process ServiceRegistryDashboard logout actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation.
Affected configurations
• ibm websphere service registry and repository 8.5
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV63498 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21693389 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97709 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV63498 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21693389 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97709 exchange.xforce.ibmcloud.com