Lucene search
HistoryDec 24, 2014 - 11:59 a.m.
CVE-2014-6181
ibm
websphere
service registry and repository
wsrr
cve-2014-6181
security vulnerability
access control
nvd
5.7 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
45.2%
IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access-control checks for contained objects, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
Affected configurations
Node
ibmwebsphere_service_registry_and_repositoryMatch7.0.0
ORibmwebsphere_service_registry_and_repositoryMatch7.0.0.1
ORibmwebsphere_service_registry_and_repositoryMatch7.0.0.2
ORibmwebsphere_service_registry_and_repositoryMatch7.0.0.3
ORibmwebsphere_service_registry_and_repositoryMatch7.0.0.4
Related
cvelist
cvelist
CVE-2014-6181
2014-12-24 11:00:00
nvd
nvd
CVE-2014-6181
2014-12-24 11:59:08
prion
prion
Design/Logic Flaw
2014-12-24 11:59:00
nessus
nessus
5.7 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
45.2%
Related for CVE-2014-6181