CVE-2014-6177

IBM WebSphere Service Registry and Repository 7.0.x < 7.0.0.5 and 7.5.x < 7.5.0.3 - Information Disclosure

Title source: llm
STIX 2.1

Description

IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.3 does not perform access-control checks for depth-0 retrieve operations, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

References (4)

Core 4
Core References
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21693384
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IV24386
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21693381
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/98492

Scores

EPSS 0.0164
EPSS Percentile 73.9%

Details

CWE
CWE-264
Status published
Products (8)
ibm/websphere_service_registry_and_repository 7.0.0
ibm/websphere_service_registry_and_repository 7.0.0.1
ibm/websphere_service_registry_and_repository 7.0.0.2
ibm/websphere_service_registry_and_repository 7.0.0.3
ibm/websphere_service_registry_and_repository 7.0.0.4
ibm/websphere_service_registry_and_repository 7.5.0.0
ibm/websphere_service_registry_and_repository 7.5.0.1
ibm/websphere_service_registry_and_repository 7.5.0.2
Published Dec 24, 2014
Tracked Since Feb 18, 2026