CVE-2009-0440

2009-02-2222:00:00

mitre

www.cve.org

6.1 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.0%

JSON

IBM WebSphere Partner Gateway (WPG) 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet (aka RNIF) document to a backend application, related to (1) “altered service content” and (2) “digital signature foot-print.”