critical10.0
CVE-2014-3060
Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to…
Impact
Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Datapower Xc10 Appliance Firmware | Version 2.5.0.0 |
| Ibm | Websphere Datapower Xc10 Appliance | All versions |
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476
- http://www-01.ibm.com/support/docview.wss?uid=swg21685705
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93534
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476
- http://www-01.ibm.com/support/docview.wss?uid=swg21685705
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93534