[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249622

 
 

909

 
 

195521

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-6186Date: (C)2014-12-25   (M)2023-12-22


IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.0
Exploit Score: 8.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
IV26309
http://www.ibm.com/support/docview.wss?uid=swg21693379
http://www.ibm.com/support/docview.wss?uid=swg21693381
http://www.ibm.com/support/docview.wss?uid=swg21693384
http://www.ibm.com/support/docview.wss?uid=swg21693387
ibm-wsrr-cve20146186-sec-bypass(98549)

CPE    15
cpe:/a:ibm:websphere_service_registry_and_repository:6.3.0
cpe:/a:ibm:websphere_service_registry_and_repository:7.0.0.2
cpe:/a:ibm:websphere_service_registry_and_repository:6.3.0.4
cpe:/a:ibm:websphere_service_registry_and_repository:7.0.0
...
CWE    1
CWE-264

© SecPod Technologies