Design/Logic Flaw

2014-12-2902:59:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.9%

JSON

IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not properly process ServiceRegistryDashboard logout actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation.

CPENameOperatorVersion
websphere_service_registry_and_repositoryeq8.5

CPE	Name	Operator	Version
	websphere_service_registry_and_repository	eq	8.5

References

www-01.ibm.com/support/docview.wss?uid=swg1IV63498

www-01.ibm.com/support/docview.wss?uid=swg21693389

exchange.xforce.ibmcloud.com/vulnerabilities/97709