CVE-2015-1885 WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant...
HighCVSS 9.3
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | = 7.0 | No fix listed |
| ibm websphere application server | = 7.0.0.1 | No fix listed |
| ibm websphere application server | = 7.0.0.2 | No fix listed |
| ibm websphere application server | = 7.0.0.3 | No fix listed |
| ibm websphere application server | = 7.0.0.10 | No fix listed |
| ibm websphere application server | = 7.0.0.11 | No fix listed |
| ibm websphere application server | = 7.0.0.12 | No fix listed |
| ibm websphere application server | = 7.0.0.13 | No fix listed |
| ibm websphere application server | = 7.0.0.14 | No fix listed |
| ibm websphere application server | = 7.0.0.15 | No fix listed |
| ibm websphere application server | = 7.0.0.16 | No fix listed |
| ibm websphere application server | = 7.0.0.17 | No fix listed |
| ibm websphere application server | = 7.0.0.18 | No fix listed |
| ibm websphere application server | = 7.0.0.19 | No fix listed |
| ibm websphere application server | = 7.0.0.21 | No fix listed |
| ibm websphere application server | = 7.0.0.22 | No fix listed |
| ibm websphere application server | = 7.0.0.23 | No fix listed |
| ibm websphere application server | = 7.0.0.24 | No fix listed |
| ibm websphere application server | = 7.0.0.25 | No fix listed |
| ibm websphere application server | = 7.0.0.27 | No fix listed |
| ibm websphere application server | = 7.0.0.29 | No fix listed |
| ibm websphere application server | = 7.0.0.31 | No fix listed |
| ibm websphere application server | = 7.0.0.32 | No fix listed |
| ibm websphere application server | = 7.0.0.33 | No fix listed |
| ibm websphere application server | = 7.0.0.34 | No fix listed |
Show 12 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | = 7.0.0.35 | No fix listed |
| ibm websphere application server | = 7.0.0.36 | No fix listed |
| ibm websphere application server | = 7.0.0.37 | No fix listed |
| ibm websphere application server | = 7.0.0.38 | No fix listed |
| ibm websphere application server | = 8.5.0.0 | No fix listed |
| ibm websphere application server | = 8.5.0.1 | No fix listed |
| ibm websphere application server | = 8.5.0.2 | No fix listed |
| ibm websphere application server | = 8.5.5.0 | No fix listed |
| ibm websphere application server | = 8.5.5.1 | No fix listed |
| ibm websphere application server | = 8.5.5.2 | No fix listed |
| ibm websphere application server | = 8.5.5.3 | No fix listed |
| ibm websphere application server | = 8.5.5.4 | No fix listed |
References
- PI33202 vendor-advisory
- PI36211 vendor-advisory
- www-01.ibm.com patch vendor-advisory
- www-01.ibm.com
- 74219 vdb-entry
- 1032190 vdb-entry