Description
IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access-control checks for contained objects, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
References
- ibm-wsrr-cve20146181-sec-bypass(98517) vdb-entry
- IV25285 vendor-advisory
- http://www.ibm.com/support/docview.wss?uid=swg21693381