PT-2013-5538

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliances version 2.5.0 Description The issue allows remote attackers to cause a denial of service via unspecified vectors because the appliances do not require authentication for all administrative actions...

CVE-2013-5446: Undefined Security Weakness

The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors...

PT-2013-5544

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliances versions 2.1.0 through 2.5.0 Description The issue is related to the console on IBM WebSphere DataPower XC10 appliances, which does not properly process logoff actions. This has an unspecified impact and...

CVE-2013-5428: Undefined Security Weakness

IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2013-5403

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors...

Code injection

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors...

CVE-2013-5403

IBM WebSphere DataPower XC10 Appliance is affected (versions 2.0, 2.1, 2.5). CVE-2013-5403 describes an unauthenticated, remote-access vulnerability that allows administrative access to code and data. The IBM security bulletin confirms affected firmware ranges and provides remediation guidance: u...

CVE-2013-5403

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors...

CVE-2013-5403: Undefined Security Weakness

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors...

PT-2013-5518

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliance versions 2.0 through 2.5.0.1 Description The issue allows remote attackers to obtain administrative access via unknown vectors. Recommendations For versions 2.0 through 2.5.0.1, update to a version that...

CVE-2013-0600

Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative actions via unknown vectors...

CVE-2013-0600

Technical details about CVE-2013-0600 are not publicly available in the provided documents. Monitor for updates.

CVE-2013-0600

Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative actions via unknown vectors...

PT-2013-2454

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 Appliance versions 2.0 through 2.1 FP3 Description The issue allows remote attackers to bypass authentication and perform administrative actions. Recommendations For versions 2.0 through 2.1 FP3, at the moment, the...

CVE-2013-0600: Undefined Security Weakness

Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative actions via unknown vectors...

CVE-2012-5756

The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2, when a collective configuration is enabled, has a single secret key that is shared across different customers' installations, which allows remote attackers to spoof a container server by 1 sniffing the...

Code injection

The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2, when a collective configuration is enabled, has a single secret key that is shared across different customers' installations, which allows remote attackers to spoof a container server by 1 sniffing the...

Authentication flaw

The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 does not require authentication for an unspecified interface, which allows remote attackers to cause a denial of service process exit via unknown vectors...

Design/Logic Flaw

The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 allows remote authenticated users to bypass intended administrative-role requirements and perform arbitrary JMX operations via unspecified vectors...

CVE-2012-5756

The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2, when a collective configuration is enabled, has a single secret key that is shared across different customers' installations, which allows remote attackers to spoof a container server by 1 sniffing the...