CVE Vulnerabilities

CVE-2014-8890

Published: Dec 18, 2014 | Modified: Sep 08, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.1 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

IBM WebSphere Application Server Liberty Profile 8.5.x before 8.5.5.4 allows remote attackers to gain privileges by leveraging the combination of a servlets deployment descriptor security constraints and ServletSecurity annotations.

Affected Software

Name Vendor Start Version End Version
Websphere_application_server Ibm 8.5.0.0 (including) 8.5.0.0 (including)
Websphere_application_server Ibm 8.5.0.1 (including) 8.5.0.1 (including)
Websphere_application_server Ibm 8.5.0.2 (including) 8.5.0.2 (including)
Websphere_application_server Ibm 8.5.5.0 (including) 8.5.5.0 (including)
Websphere_application_server Ibm 8.5.5.1 (including) 8.5.5.1 (including)
Websphere_application_server Ibm 8.5.5.2 (including) 8.5.5.2 (including)
Websphere_application_server Ibm 8.5.5.3 (including) 8.5.5.3 (including)

References