Vulnerability Details CVE-2014-3070
The addFileRegistryAccount Virtual Member Manager (VMM) SPI Admin Task in IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3 does not properly create accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 78.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI16765
- http://www-01.ibm.com/support/docview.wss?uid=swg21681249
- http://www.securityfocus.com/bid/69296
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93777
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI16765
- http://www-01.ibm.com/support/docview.wss?uid=swg21681249
- http://www.securityfocus.com/bid/69296
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93777
Products affected by CVE-2014-3070
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.0
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.1
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.2
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.3
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.4
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.5
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.6
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.7
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.8
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.9
-
cpe:2.3:a:ibm:websphere_application_server:8.5.0.0
-
cpe:2.3:a:ibm:websphere_application_server:8.5.0.1
-
cpe:2.3:a:ibm:websphere_application_server:8.5.0.2
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.0
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.1
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.2