CVE Vulnerabilities

CVE-2014-3070

Published: Aug 22, 2014 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The addFileRegistryAccount Virtual Member Manager (VMM) SPI Admin Task in IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3 does not properly create accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Websphere_application_server Ibm 8.5.0.2 8.5.0.2
Websphere_application_server Ibm 8.5.5.1 8.5.5.1
Websphere_application_server Ibm 8.5.5.0 8.5.5.0
Websphere_application_server Ibm 8.5.0.1 8.5.0.1
Websphere_application_server Ibm 8.5.0.0 8.5.0.0
Websphere_application_server Ibm 8.5.5.2 8.5.5.2

References