Session Management Flaw in IBM WebSphere Service Registry and Repository
CVE-2014-6160
Currently unrated
Key Information:
- Vendor
IBM
- Vendor
- CVE Published:
- 29 December 2014
What is CVE-2014-6160?
IBM WebSphere Service Registry and Repository (WSRR) version 8.5 prior to 8.5.0.1 contains a session management flaw. When using Chrome and WebSEAL, the application does not correctly handle logout actions from the ServiceRegistryDashboard. This vulnerability can be exploited by remote attackers to bypass intended access restrictions by exploiting an unattended workstation, potentially granting unauthorized access to sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.