Design/Logic Flaw

2014-12-2411:59:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.9%

JSON

IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph.

CPENameOperatorVersion
websphere_service_registry_and_repositoryeq7.5.0.1
websphere_service_registry_and_repositoryeq7.0.0.1
websphere_service_registry_and_repositoryeq7.5.0.2
websphere_service_registry_and_repositoryeq8.0
websphere_service_registry_and_repositoryeq6.3.0.4
websphere_service_registry_and_repositoryeq6.3.0.1
websphere_service_registry_and_repositoryeq7.5.0.0
websphere_service_registry_and_repositoryeq7.0.0.4
websphere_service_registry_and_repositoryeq7.0.0.3
websphere_service_registry_and_repositoryeq7.0.0

Name	Operator	Version
websphere_service_registry_and_repository	eq	7.5.0.1
websphere_service_registry_and_repository	eq	7.0.0.1
websphere_service_registry_and_repository	eq	7.5.0.2
websphere_service_registry_and_repository	eq	8.0
websphere_service_registry_and_repository	eq	6.3.0.4
websphere_service_registry_and_repository	eq	6.3.0.1
websphere_service_registry_and_repository	eq	7.5.0.0
websphere_service_registry_and_repository	eq	7.0.0.4
websphere_service_registry_and_repository	eq	7.0.0.3
websphere_service_registry_and_repository	eq	7.0.0