Vulnerability in Ibm Websphere Datapower Xc10 Appliance
CVE-2014-3060
Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie.
EPSS: 0.024 (82.4th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_datapower_xc10_appliance
- Ibm Websphere_datapower_xc10_appliance_firmware — versions 2.5.0.0
- N/a — versions n/a
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)