CVE-2017-1500

IBM Worklight/MobileFirst Platform Foundation is affected by CVE-2017-1500: a Reflected XSS in the RESTful Web Api authorization function where the scope parameter can reflect arbitrary JavaScript if a realm not defined in authenticationConfig.xml is used, potentially enabling credential disclosu...

CVE-2017-1500

A Reflected Cross Site Scripting XSS vulnerability exists in the authorization function exposed by RESTful Web Api of IBM Worklight Framework 6.1, 6.2, 6.3, 7.0, 7.1, and 8.0. The vulnerable parameter is "scope"; if you set as its value a "realm" not defined in authenticationConfig.xml, you get a...

CVE-2014-0888

IBM Worklight Foundation 5.x and 6.x prior to 6.2.0.0 are affected by CVE-2014-0888, which allows bypassing the client-side application authenticity verification under certain conditions. Affected products/versions include Worklight Foundation and IBM Mobile Foundation Consumer/Enterprise Edition...

CVE-2014-0888

IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass the application-authenticity feature via unspecified vectors...

CVE-2014-0888

IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass the application-authenticity feature via unspecified vectors...

Authentication flaw

IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass the application-authenticity feature via unspecified vectors...