CVEvulnerability
CVE-2015-0175
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-04-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:P
- Weaknesses
- CWE-264
Description
IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 does not properly implement authData elements, which allows remote authenticated users to gain privileges via unspecified vectors.
Affected configurations
• ibm websphere application server 8.5.0.0
• ibm websphere application server 8.5.0.1
• ibm websphere application server 8.5.0.2
• ibm websphere application server 8.5.5.0
• ibm websphere application server 8.5.5.1
• ibm websphere application server 8.5.5.2
• ibm websphere application server 8.5.5.3
• ibm websphere application server 8.5.5.4
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI33008 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21697368 Patch, Vendor Advisory
- http://www.securitytracker.com/id/1032190 www.securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI33008 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21697368 Patch, Vendor Advisory
- http://www.securitytracker.com/id/1032190 www.securitytracker.com