Description
The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server (WAS) 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg27011716
- PM43792 vendor-advisory
- was-wssecurity-unspecified(72299) vdb-entry
- PM50205 vendor-advisory
- 46469 third-party-advisory
- 50310 vdb-entry