Description
The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors.
References
- http://www.ibm.com/support/docview.wss?uid=swg21653546
- webspheredp-xc10-cve20135446-logoff(87910) vdb-entry
- IC93164 vendor-advisory
- IC96617 vendor-advisory