CVE-2014-3060 Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid....
HighCVSS 10.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere datapower xc10 appliance firmware | = 2.5.0.0 | No fix listed |
| ibm websphere datapower xc10 appliance | All versions | No fix listed |
References
- IT03476 vendor-advisory
- www-01.ibm.com patch vendor-advisory
- ibm-xc10-cve20143060-sec-bypass(93534) vdb-entry