CVE-2014-6181
IBM WebSphere Service Registry and Repository 7.0.x - Authenticated Information Disclosure
Title source: llmDescription
IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access-control checks for contained objects, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/98517
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IV25285
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21693381
Scores
EPSS
0.0162
EPSS Percentile
73.6%
Details
CWE
CWE-264
Status
published
Products (5)
ibm/websphere_service_registry_and_repository
7.0.0
ibm/websphere_service_registry_and_repository
7.0.0.1
ibm/websphere_service_registry_and_repository
7.0.0.2
ibm/websphere_service_registry_and_repository
7.0.0.3
ibm/websphere_service_registry_and_repository
7.0.0.4
Published
Dec 24, 2014
Tracked Since
Feb 18, 2026