CVE-2014-3060

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie.

Score

CVSS 2.0 10.0 Critical

Status

Modified - psirt@us.ibm.com

Published

2014-10-02

Last modified

2024-08-06

Affected products

• Websphere Datapower Xc10 Appliance (Ibm)
• Websphere Datapower Xc10 Appliance Firmware (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT03476
• http://www-01.ibm.com/support/docview.wss?uid=swg21685705
• https://exchange.xforce.ibmcloud.com/vulnerabilities/93534