Description
IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) does not perform EAL4 authentication checks at the proper time during "registering of response operation," which has unknown impact and attack vectors.
References
- http://www-1.ibm.com/support/docview.wss?uid=swg27007951
- 23028 third-party-advisory
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013830
- PK29847 vendor-advisory
- 21204 vdb-entry
- ADV-2006-4639 vdb-entry