Description
IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows remote attackers to cause a denial of service via unspecified vectors.
References
- http://www.ibm.com/support/docview.wss?uid=swg21653546
- webspheredp-xc10-cve20135428-auth(87560) vdb-entry
- IC93164 vendor-advisory
- IC96617 vendor-advisory