Lucene search

[email protected]CVE-2015-1882

HistoryApr 27, 2015 - 12:59 p.m.

CVE-2015-1882

2015-04-2712:59:00

CWE-362

[email protected]

web.nvd.nist.gov

ibm

websphere

application server

cve-2015-1882

nvd

security issue

race conditions

java code execution

ejb run-as user

5.7 Medium

AI Score

Confidence

High

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.0%

JSON

Multiple race conditions in IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 allow remote authenticated users to gain privileges by leveraging thread conflicts that result in Java code execution outside the context of the configured EJB Run-as user.

CPENameOperatorVersion
ibm:websphere_application_serveribm websphere application servereq8.5.0.2
ibm:websphere_application_serveribm websphere application servereq8.5.5.1
ibm:websphere_application_serveribm websphere application servereq8.5.5.0
ibm:websphere_application_serveribm websphere application servereq8.5.5.4
ibm:websphere_application_serveribm websphere application servereq8.5.0.1
ibm:websphere_application_serveribm websphere application servereq8.5.0.0
ibm:websphere_application_serveribm websphere application servereq8.5.5.3
ibm:websphere_application_serveribm websphere application servereq8.5.5.2

CPE	Name	Operator	Version
ibm:websphere_application_server	ibm websphere application server	eq	8.5.0.2
ibm:websphere_application_server	ibm websphere application server	eq	8.5.5.1
ibm:websphere_application_server	ibm websphere application server	eq	8.5.5.0
ibm:websphere_application_server	ibm websphere application server	eq	8.5.5.4
ibm:websphere_application_server	ibm websphere application server	eq	8.5.0.1
ibm:websphere_application_server	ibm websphere application server	eq	8.5.0.0
ibm:websphere_application_server	ibm websphere application server	eq	8.5.5.3
ibm:websphere_application_server	ibm websphere application server	eq	8.5.5.2

References

www-01.ibm.com/support/docview.wss?uid=swg1PI33357

www-01.ibm.com/support/docview.wss?uid=swg21697368

www.securityfocus.com/bid/74222

www.securitytracker.com/id/1032190

5.7 Medium

AI Score

Confidence

High

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.0%

JSON

Related for CVE-2015-1882

prion1 nessus2 openvas1 ibm2