Security Bulletin: Various security issues exist in WebSphere Service Registry and Repository version 8.0

Summary This bulletin describes a variety of minor security issues that have been found and fixed in WebSphere Service Registry and Repository version 8.0 Vulnerability Details CVE ID: CVE-2014-6153 DESCRIPTION: WSRR WEBUI ISSUES A COOKIE WHICH IS NOT DECLARED SSL ONLY. CVSS CVSS Base Score: 2.6...

CVE-2014-6186

CVE-2014-6186 affects IBM WebSphere Service Registry and Repository (WSRR) across multiple release streams (6.3 before 6.3.0.5; 7.0.x up to 7.0.0.5; 7.5.x before 7.5.0.3; 8.0.x before 8.0.0.1). Root cause per IBM entries: objects not accessible due to access-control restrictions can still appear ...