CVE Vulnerabilities

CVE-2015-0175

Published: Apr 27, 2015 | Modified: Nov 30, 2015
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.5 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 does not properly implement authData elements, which allows remote authenticated users to gain privileges via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Websphere_application_server Ibm 8.5.0.0 (including) 8.5.0.0 (including)
Websphere_application_server Ibm 8.5.0.1 (including) 8.5.0.1 (including)
Websphere_application_server Ibm 8.5.0.2 (including) 8.5.0.2 (including)
Websphere_application_server Ibm 8.5.5.0 (including) 8.5.5.0 (including)
Websphere_application_server Ibm 8.5.5.1 (including) 8.5.5.1 (including)
Websphere_application_server Ibm 8.5.5.2 (including) 8.5.5.2 (including)
Websphere_application_server Ibm 8.5.5.3 (including) 8.5.5.3 (including)
Websphere_application_server Ibm 8.5.5.4 (including) 8.5.5.4 (including)

References