Design/Logic Flaw

2012-11-2312:09:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.1%

JSON

The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 allows remote authenticated users to bypass intended administrative-role requirements and perform arbitrary JMX operations via unspecified vectors.

CPENameOperatorVersion
websphere_datapower_xc10_applianceeq2.0.0.1
websphere_datapower_xc10_applianceeq2.1.0.2
websphere_datapower_xc10_applianceeq2.0.0.0
websphere_datapower_xc10_applianceeq2.0.0.3
websphere_datapower_xc10_applianceeq2.1.0.1
websphere_datapower_xc10_applianceeq2.1.0.0
websphere_datapower_xc10_applianceeq2.0.0.2

Name	Operator	Version
websphere_datapower_xc10_appliance	eq	2.0.0.1
websphere_datapower_xc10_appliance	eq	2.1.0.2
websphere_datapower_xc10_appliance	eq	2.0.0.0
websphere_datapower_xc10_appliance	eq	2.0.0.3
websphere_datapower_xc10_appliance	eq	2.1.0.1
websphere_datapower_xc10_appliance	eq	2.1.0.0
websphere_datapower_xc10_appliance	eq	2.0.0.2