Lucene search

K
cvelistMitreCVELIST:CVE-2009-1172
HistoryMar 31, 2009 - 10:00 a.m.

CVE-2009-1172

2009-03-3110:00:00
mitre
www.cve.org
3

AI Score

6.3

Confidence

High

EPSS

0.005

Percentile

75.3%

The JAX-RPC WS-Security runtime in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3, when APAR PK41002 is installed, does not properly validate UsernameToken objects, which has unknown impact and attack vectors.

AI Score

6.3

Confidence

High

EPSS

0.005

Percentile

75.3%

Related for CVELIST:CVE-2009-1172