IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux, Solaris, and HP-UX, when a Local OS registry is used, does not properly validate user accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?&uid=swg21632423 | Vendor Advisory |
http://www-01.ibm.com/support/docview.wss?uid=swg1PM75582 | Broken Link |
https://exchange.xforce.ibmcloud.com/vulnerabilities/82759 | VDB Entry Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Information
Published : 2013-04-24 03:28
Updated : 2022-12-13 12:50
NVD link : CVE-2013-0543
Mitre link : CVE-2013-0543
JSON object : View
CWE
CWE-863
Incorrect Authorization
Products Affected
linux
- linux_kernel
hp
- hp-ux
ibm
- websphere_application_server
sun
- sunos