Description
IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before 8.5.0.1, when the PM44303 fix is installed, does not properly validate credentials, which allows remote authenticated users to obtain administrative access via unspecified vectors.
References
- 1027462 vdb-entry
- 55309 vdb-entry
- 54971 third-party-advisory
- was-pm44303-security-bypass(77959) vdb-entry
- http://www.ibm.com/support/docview.wss?uid=swg21609067
- PM71296 vendor-advisory
- 55115 third-party-advisory