CVE-2009-0906 - The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors

Back Back to CVE browser

MEDIUM

The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors

Published Aug 13, 2009

6.5

MEDIUM

CVSS 2.0

EPSS 1.21%

Description

The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (5)

http://secunia.com/advisories/36306
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27015429
x_refsource_CONFIRMPatch
http://www-1.ibm.com/support/docview.wss?uid=swg1PK86047
vendor-advisoryx_refsource_AIXAPAR
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0903
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52074
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/36306		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27015429		x_refsource_CONFIRMPatch
http://www-1.ibm.com/support/docview.wss?uid=swg1PK86047		vendor-advisoryx_refsource_AIXAPAR
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0903		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52074		vdb-entryx_refsource_XF