Security feature bypass

2009-06-0317:00:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.6%

JSON

The Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 permits “non-standard http methods,” which has unknown impact and remote attack vectors.

CPENameOperatorVersion
websphere_application_servereq6.0.2.10
websphere_application_servereq6.0.2.1
websphere_application_servereq6.0.2.5
websphere_application_servereq6.0.2.20
websphere_application_servereq6.0.2.13
websphere_application_servereq6.0.2.9
websphere_application_servereq6.0.2.28
websphere_application_servereq6.0.2.11
websphere_application_servereq6.0.2.6
websphere_application_servereq6.0.2.2

Name	Operator	Version
websphere_application_server	eq	6.0.2.10
websphere_application_server	eq	6.0.2.1
websphere_application_server	eq	6.0.2.5
websphere_application_server	eq	6.0.2.20
websphere_application_server	eq	6.0.2.13
websphere_application_server	eq	6.0.2.9
websphere_application_server	eq	6.0.2.28
websphere_application_server	eq	6.0.2.11
websphere_application_server	eq	6.0.2.6
websphere_application_server	eq	6.0.2.2