CVE-2015-0175

IBM WebSphere Application Server 8.5 Liberty Profile < 8.5.5.5 - Authenticated Privilege Escalation via authData Element

Title source: llm
STIX 2.1

Description

IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 does not properly implement authData elements, which allows remote authenticated users to gain privileges via unspecified vectors.

References (3)

Core 3
Core References
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI33008
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032190
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21697368

Scores

EPSS 0.0190
EPSS Percentile 77.5%

Details

CWE
CWE-264
Status published
Products (8)
ibm/websphere_application_server 8.5.0.0
ibm/websphere_application_server 8.5.0.1
ibm/websphere_application_server 8.5.0.2
ibm/websphere_application_server 8.5.5.0
ibm/websphere_application_server 8.5.5.1
ibm/websphere_application_server 8.5.5.2
ibm/websphere_application_server 8.5.5.3
ibm/websphere_application_server 8.5.5.4
Published Apr 27, 2015
Tracked Since Feb 18, 2026