Security Bulletin: Authentication vulnerability affects IBM Integration Bus V10.0.0.4 onwards (CVE-2016-8918 )

Summary Web user accounts can be authenticated against an LDAP server, in IBM Integration Bus V10.0.0.4 and later versions. However, under some circumstances it is possible for a remote user to be authenticated without providing valid credentials. Vulnerability Details CVEID: CVE-2016-8918...

CVE-2016-8918

IBM Integration Bus (V10, and later) under non-default configurations could allow a remote attacker to authenticate without valid credentials, effectively bypassing authentication. The root cause is an authentication vulnerability in non-default configurations, reported as CVE-2016-8918. A fix is...