Design/Logic Flaw

2015-10-2818:59:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.1%

JSON

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF18, and 8.5.0 before CF08 improperly restricts resource access, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by configuration information.

CPENameOperatorVersion
websphere_portaleq7.0.0.1
websphere_portaleq8.5.0.0
websphere_portaleq6.0.0.4
websphere_portaleq6.0.1.0
websphere_portaleq8.0.0.1
websphere_portaleq6.0.1.3
websphere_portaleq6.1.0
websphere_portaleq7.0.0.0
websphere_portaleq8.0.0.0
websphere_portaleq6.1.5.1

Name	Operator	Version
websphere_portal	eq	7.0.0.1
websphere_portal	eq	8.5.0.0
websphere_portal	eq	6.0.0.4
websphere_portal	eq	6.0.1.0
websphere_portal	eq	8.0.0.1
websphere_portal	eq	6.0.1.3
websphere_portal	eq	6.1.0
websphere_portal	eq	7.0.0.0
websphere_portal	eq	8.0.0.0
websphere_portal	eq	6.1.5.1