Description
Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."
References
- http://www-1.ibm.com/support/docview.wss?uid=swg27007951
- websphere-messaging-security-bypass(34901) vdb-entry
- 25704 third-party-advisory
- ADV-2007-2234 vdb-entry
- 24505 vdb-entry
- 41613 vdb-entry