PT-2013-2416

CVE-2013-0540

·

Published

2013-04-24

·

Updated

2017-08-29

Description by

CVSS 2.0
3.5
Low
MetricsAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server (WAS) Liberty Profile versions 8.5.0.0 through 8.5.0.1
Description The issue is related to the improper validation of authentication cookies when SSL is not enabled. This allows remote authenticated users to bypass intended access restrictions via an HTTP session.
Recommendations For IBM WebSphere Application Server (WAS) Liberty Profile versions 8.5.0.0 through 8.5.0.1, update to version 8.5.0.2 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-287: Improper Authentication
Related identifiers
CVE-2013-0540
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com