CVE-2015-1887

CVE-2015-1887 affects IBM WebSphere Portal: information disclosure of JCR data via a crafted request due to improper access control on the JCR component. A remote, unauthenticated attacker could obtain sensitive information from the Java Content Repository. Affected versions per sources: WebSpher...

IBM WebSphere Portal JCR Information Disclosure (PI36150)

The version of IBM WebSphere Portal installed on the remote Windows host is affected by an information disclosure vulnerability due to improper access control enforcement of the JCR component. A remote, unauthenticated attacker, using a specially crafted request, can exploit this to gain access t...