Lucene search
HistoryDec 22, 2010 - 9:00 p.m.
CVE-2010-2644
ibm
wsrr
7.0.0
vulnerability
remote attackers
governance actions
nvd
cve-2010-2644
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.2%
IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which allows remote attackers to perform governance actions via unspecified API requests to an EJB interface.
Affected configurations
Node
ibmwebsphere_service_registry_and_repositoryMatch7.0.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:websphere_service_registry_and_repository | ibm websphere service registry and repository | eq | 7.0.0 |
Related
prion
prion
Improper access control
2010-12-22 21:00:00
nvd
nvd
CVE-2010-2644
2010-12-22 21:00:01
nessus
nessus
cvelist
cvelist
CVE-2010-2644
2010-12-22 20:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.2%
Related for CVE-2010-2644