Lucene search

PRIOn knowledge basePRION:CVE-2015-1885

HistoryApr 27, 2015 - 12:59 p.m.

Design/Logic Flaw

2015-04-2712:59:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.008 Low

EPSS

Percentile

81.7%

JSON

WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vectors.

CPENameOperatorVersion
websphere_application_servereq7.0.0.14
websphere_application_servereq8.5.0.2
websphere_application_servereq7.0.0.12
websphere_application_servereq7.0.0.2
websphere_application_servereq7.0.0.37
websphere_application_servereq7.0.0.31
websphere_application_servereq7.0.0.24
websphere_application_servereq7.0.0.25
websphere_application_servereq7.0.0.33
websphere_application_servereq7.0.0.18

Name	Operator	Version
websphere_application_server	eq	7.0.0.14
websphere_application_server	eq	8.5.0.2
websphere_application_server	eq	7.0.0.12
websphere_application_server	eq	7.0.0.2
websphere_application_server	eq	7.0.0.37
websphere_application_server	eq	7.0.0.31
websphere_application_server	eq	7.0.0.24
websphere_application_server	eq	7.0.0.25
websphere_application_server	eq	7.0.0.33
websphere_application_server	eq	7.0.0.18

Rows per page:

1-10 of 371

References

www-01.ibm.com/support/docview.wss?uid=swg1PI33202

www-01.ibm.com/support/docview.wss?uid=swg1PI36211

www-01.ibm.com/support/docview.wss?uid=swg21697368

www-01.ibm.com/support/docview.wss?uid=swg21963275

www.securityfocus.com/bid/74219

www.securitytracker.com/id/1032190

7.1 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.008 Low

EPSS

Percentile

81.7%

JSON

Related for PRION:CVE-2015-1885