CVE-2015-1946 IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebSphere Application Server (WAS) 7.0 and 8.0, does not properly implement user role...
MediumCVSS 4.4
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebSphere Application Server (WAS) 7.0 and 8.0, does not properly implement user roles, which allows local users to gain privileges via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | = 7.0 | No fix listed |
| ibm websphere application server | = 8.0.0.0 | No fix listed |
| ibm websphere application server | = 8.5.0.0 | No fix listed |
| ibm websphere application server | = 8.5.0.1 | No fix listed |
| ibm websphere application server | = 8.5.0.2 | No fix listed |
| ibm websphere application server | = 8.5.5.0 | No fix listed |
| ibm websphere application server | = 8.5.5.1 | No fix listed |
| ibm websphere application server | = 8.5.5.2 | No fix listed |
| ibm websphere application server | = 8.5.5.3 | No fix listed |
| ibm websphere application server | = 8.5.5.4 | No fix listed |
| ibm websphere application server | = 8.5.5.5 | No fix listed |
| ibm websphere virtual enterprise | = 7.0 | No fix listed |
| ibm websphere virtual enterprise | = 7.0.0.1 | No fix listed |
| ibm websphere virtual enterprise | = 7.0.0.2 | No fix listed |
| ibm websphere virtual enterprise | = 7.0.0.3 | No fix listed |
| ibm websphere virtual enterprise | = 7.0.0.4 | No fix listed |
| ibm websphere virtual enterprise | = 7.0.0.5 | No fix listed |
References
- PI35180 vendor-advisory
- www-01.ibm.com patch vendor-advisory
- 75496 vdb-entry