VulnerabilityModified
CVE-2014-6186
IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph.
MEDIUM 4.0EPSS 1.80%
Does this matter?
Lower severity and a low EPSS score (1.80%). Track it; it rarely justifies an emergency change on its own.
Description
IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
- EPSS
- 1.80% probability · 77th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- ibm/websphere service registry and repository
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV26309
- http://www.ibm.com/support/docview.wss?uid=swg21693379Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693381Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693384Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693387Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98549
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV26309
- http://www.ibm.com/support/docview.wss?uid=swg21693379Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693381Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693384Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693387Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98549
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.