CVE-2014-6160 | BDVDB-2026-67029 Detail

Description#

IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not properly process ServiceRegistryDashboard logout actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/97709
http://www-01.ibm.com/support/docview.wss?uid=swg21693389
http://www-01.ibm.com/support/docview.wss?uid=swg1IV63498

Exploit#

No public exploit known

History#

Version 12014-12-29Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.