CVE-2014-6186

IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:P/A:N
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
VendorProductVersion
ibmwebsphere_service_registry_and_repository
6.3.0
ibmwebsphere_service_registry_and_repository
6.3.0.1
ibmwebsphere_service_registry_and_repository
6.3.0.2
ibmwebsphere_service_registry_and_repository
6.3.0.3
ibmwebsphere_service_registry_and_repository
6.3.0.4
ibmwebsphere_service_registry_and_repository
7.0.0
ibmwebsphere_service_registry_and_repository
7.0.0.1
ibmwebsphere_service_registry_and_repository
7.0.0.2
ibmwebsphere_service_registry_and_repository
7.0.0.3
ibmwebsphere_service_registry_and_repository
7.0.0.4
ibmwebsphere_service_registry_and_repository
7.0.0.5
ibmwebsphere_service_registry_and_repository
7.5.0.0
ibmwebsphere_service_registry_and_repository
7.5.0.1
ibmwebsphere_service_registry_and_repository
7.5.0.2
ibmwebsphere_service_registry_and_repository
8.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration