CVE-2009-0440

IBM WebSphere Partner Gateway (WPG) 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated…

published February 22, 2009

CVSS
—
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

IBM WebSphere Partner Gateway (WPG) 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet (aka RNIF) document to a backend application, related to (1) "altered service content" and (2) "digital signature foot-print."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01195 · 67.8th percentile
Published
2009-02-22T22:00Z
EPSS history
Timeline
  • 22 FEB 22:00Z
    IBM WebSphere Partner Gateway (WPG) 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated…
    cvelistv5