Description
IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1, when JAX-RS is used, does not properly validate requests, which allows remote attackers to gain privileges via unspecified vectors.
References
- PM67082 vendor-advisory
- was-libertyprofile-security-bypass(79539) vdb-entry
- 56460 vdb-entry
- http://www.ibm.com/support/docview.wss?uid=swg21614265