CVE-2014-3059

IBM WebSphere DataPower XC10 <2.5 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network.

References (3)

Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21685705
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/93533

Scores

EPSS 0.0241
EPSS Percentile 82.4%

Details

Status published
Products (2)
ibm/websphere_datapower_xc10_appliance
ibm/websphere_datapower_xc10_appliance_firmware 2.5.0.0
Published Oct 02, 2014
Tracked Since Feb 18, 2026