critical9.3
CVE-2015-1885
WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Pro…
Impact
WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Application Server | Versions 7.0, 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.10, 7.0.0.11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI33202
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI36211
- http://www-01.ibm.com/support/docview.wss?uid=swg21697368
- http://www-01.ibm.com/support/docview.wss?uid=swg21963275
- http://www.securityfocus.com/bid/74219
- http://www.securitytracker.com/id/1032190
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI33202
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI36211
- http://www-01.ibm.com/support/docview.wss?uid=swg21697368
- http://www-01.ibm.com/support/docview.wss?uid=swg21963275
- http://www.securityfocus.com/bid/74219
- http://www.securitytracker.com/id/1032190