CVEvulnerability
CVE-2016-2945
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-07-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document.
Affected configurations
• ibm websphere application server 8.5.5.8
• ibm websphere application server 8.5.5.9
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI62450 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21984502 Vendor Advisory
- http://www.securityfocus.com/bid/91517 www.securityfocus.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI62450 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21984502 Vendor Advisory
- http://www.securityfocus.com/bid/91517 www.securityfocus.com