CVE-2013-0540 | BDVDB-2026-55587 Detail

Description#

IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.0.2, when SSL is not enabled, does not properly validate authentication cookies, which allows remote authenticated users to bypass intended access restrictions via an HTTP session.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?&uid=swg21632423
http://www-01.ibm.com/support/docview.wss?uid=swg1PM81056
https://exchange.xforce.ibmcloud.com/vulnerabilities/82695

Exploit#

No public exploit known

History#

Version 12013-04-24Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.