IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials.
[
{
"product": "Integration Bus",
"vendor": "IBM Corporation",
"versions": [
{
"status": "affected",
"version": "9.0.0.0"
},
{
"status": "affected",
"version": "9.0"
},
{
"status": "affected",
"version": "10"
},
{
"status": "affected",
"version": "10.0"
},
{
"status": "affected",
"version": "9"
}
]
}
]