CVEvulnerability
CVE-2015-1885
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-04-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vectors.
Affected configurations
• ibm websphere application server 7.0
• ibm websphere application server 7.0.0.1
• ibm websphere application server 7.0.0.2
• ibm websphere application server 7.0.0.3
• ibm websphere application server 7.0.0.10
• ibm websphere application server 7.0.0.11
• ibm websphere application server 7.0.0.12
• ibm websphere application server 7.0.0.13
• ibm websphere application server 7.0.0.14
• ibm websphere application server 7.0.0.15
• ibm websphere application server 7.0.0.16
• ibm websphere application server 7.0.0.17
• ibm websphere application server 7.0.0.18
• ibm websphere application server 7.0.0.19
• ibm websphere application server 7.0.0.21
• ibm websphere application server 7.0.0.22
• ibm websphere application server 7.0.0.23
• ibm websphere application server 7.0.0.24
• ibm websphere application server 7.0.0.25
• ibm websphere application server 7.0.0.27
• ibm websphere application server 7.0.0.29
• ibm websphere application server 7.0.0.31
• ibm websphere application server 7.0.0.32
• ibm websphere application server 7.0.0.33
• ibm websphere application server 7.0.0.34
• ibm websphere application server 7.0.0.35
• ibm websphere application server 7.0.0.36
• ibm websphere application server 7.0.0.37
• ibm websphere application server 7.0.0.38
• ibm websphere application server 8.5.0.0
• ibm websphere application server 8.5.0.1
• ibm websphere application server 8.5.0.2
• ibm websphere application server 8.5.5.0
• ibm websphere application server 8.5.5.1
• ibm websphere application server 8.5.5.2
• ibm websphere application server 8.5.5.3
• ibm websphere application server 8.5.5.4
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI33202 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI36211 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21697368 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21963275 www-01.ibm.com
- http://www.securityfocus.com/bid/74219 www.securityfocus.com
- http://www.securitytracker.com/id/1032190 www.securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI33202 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI36211 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21697368 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21963275 www-01.ibm.com
- http://www.securityfocus.com/bid/74219 www.securityfocus.com
- http://www.securitytracker.com/id/1032190 www.securitytracker.com