CVE-2009-2085

The Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion…

published August 13, 2009

CVSS
—
EPSS
2%
Percentile
83.7
In the wild
Unconfirmed
What it is

The Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion with CSIv2 Security, which allows remote attackers to bypass intended CSIv2 access restrictions via vectors involving Enterprise JavaBeans (EJB).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02370 · 83.7th percentile
Published
2009-08-13T18:00Z
EPSS history
Timeline
  • 13 AUG 18:00Z
    The Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion…
    cvelistv5