Vulnerability in Ibm Websphere_application_server

CVE-2015-1946

IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebSphere Application Server (WAS) 7.0 and 8.0, does not properly implement user roles, which allows local users to gain pri…

EPSS: 0.004 (27.6th percentile) — read the EPSS interpretation.

Affected products

Ibm Websphere_application_server — versions 7.0, 8.0.0.0, 8.5.0.0
Ibm Websphere_virtual_enterprise — versions 7.0, 7.0.0.1, 7.0.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_BID)