Medium · 4.2 CVE-2021-29754 EUVD-2021-16228GHSA-cq24-6hph-77qc

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbou…

Published Jun 11, 2021 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: WebSphere Application Server

Description

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association Interceptor (TAI). IBM X-Force ID: 202006.

Affected products

Vendor	Product	Affected	Fixed
IBM	WebSphere Application Server	7.0, 8.0, 8.5, 9.0	—

References

https://www.ibm.com/support/pages/node/6462627
ibm-was-cve202129754-priv-escalation (202006) vdb-entry