Unspecified Vulnerability in IBM WebSphere DataPower XC10 Appliance
CVE-2014-3059

Currently unrated

Key Information:

Vendor
IBM
Status
Websphere Datapower Xc10 Appliance Firmware
Websphere Datapower Xc10 Appliance
Vendor
CVE Published:
2 October 2014

Summary

An unspecified vulnerability in the Administrative Console of the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to gain administrative privileges. This is achieved by exploiting weaknesses in the eXtreme Scale distributed ObjectGrid network, potentially allowing unauthorized users to interact with sensitive administrative functions.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21685705
x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476
vendor-advisoryx_refsource_AIXAPAR
https://exchange.xforce.ibmcloud.com/vulnerabilities/93533
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.