IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 improperly performs logout actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg1PI44098 | Patch Vendor Advisory |
http://www-01.ibm.com/support/docview.wss?uid=swg1PI44105 | Patch Vendor Advisory |
http://www-01.ibm.com/support/docview.wss?uid=swg21966044 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2015-10-03 19:59
Updated : 2015-10-05 14:07
NVD link : CVE-2015-2027
Mitre link : CVE-2015-2027
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
ibm
- websphere_extreme_scale