Description
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF18, and 8.5.0 before CF08 improperly restricts resource access, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by configuration information.
References (3)
Core 3
Core References
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI47714
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1033988
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21963226
Scores
EPSS
0.0213
EPSS Percentile
79.7%
Details
CWE
CWE-284
Status
published
Products (32)
ibm/websphere_portal
6.0
ibm/websphere_portal
6.0.0.1
ibm/websphere_portal
6.0.0.2
ibm/websphere_portal
6.0.0.3
ibm/websphere_portal
6.0.0.4
ibm/websphere_portal
6.0.1.0
ibm/websphere_portal
6.0.1.1
ibm/websphere_portal
6.0.1.2
ibm/websphere_portal
6.0.1.3
ibm/websphere_portal
6.0.1.4
... and 22 more
Published
Oct 28, 2015
Tracked Since
Feb 18, 2026