medium5.0
CVE-2014-6164
IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attackers to spoof OpenID and OpenID Connect cookies, and consequ…
Impact
IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attackers to spoof OpenID and OpenID Connect cookies, and consequently obtain sensitive information, via a crafted URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Application Server | Versions 8.0.0.0, 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.4, 8.0.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI23430
- http://www-01.ibm.com/support/docview.wss?uid=swg21690185
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97713
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI23430
- http://www-01.ibm.com/support/docview.wss?uid=swg21690185
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97713