Remote Access Vulnerability in IBM WebSphere DataPower XC10 Appliance
CVE-2014-3060

Currently unrated

Key Information:

Vendor
IBM
Status
Websphere Datapower Xc10 Appliance Firmware
Websphere Datapower Xc10 Appliance
Vendor
CVE Published:
2 October 2014

Summary

An unspecified vulnerability in the IBM WebSphere DataPower XC10 appliance 2.5 enables remote attackers to gain administrative privileges. This can be exploited by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie, allowing attackers to potentially manipulate or control sensitive operations within the appliance.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21685705
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/93534
vdb-entryx_refsource_XF
http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476
vendor-advisoryx_refsource_AIXAPAR

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.