Description
Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21685705
- ibm-xc10-cve20143060-sec-bypass(93534) vdb-entry
- IT03476 vendor-advisory