CVE-2009-2085 | BDVDB-2026-37865 Detail

Description#

The Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion with CSIv2 Security, which allows remote attackers to bypass intended CSIv2 access restrictions via vectors involving Enterprise JavaBeans (EJB).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg27007951
https://exchange.xforce.ibmcloud.com/vulnerabilities/52076
http://www-1.ibm.com/support/docview.wss?uid=swg1PK83097
http://www-01.ibm.com/support/docview.wss?uid=swg27014463

Exploit#

No public exploit known

History#

Version 12009-08-13Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.