CVE-2013-0543 in WebSphere Application Server
Summary
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux, Solaris, and HP-UX, when a Local OS registry is used, does not properly validate user accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
12/16/2012
Disclosure
04/24/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 8521 | IBM WebSphere Application Server Local OS Registry access control | 264 | Unproven | Official fix | CVE-2013-0543 |