CVE-2009-2085: High severity IBM WebSphere Application Server Feature Pack for Web Services vulnerability
The Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion with CSIv2 Security, which allows remote attackers to bypass intended CSIv2 access restrictions via vectors involving Enterprise JavaBeans (EJB).
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2085?
CVE-2009-2085 is rated as a moderate severity vulnerability, leading to potential unauthorized access.
How do I fix CVE-2009-2085?
To remediate CVE-2009-2085, update IBM WebSphere Application Server to version 6.1.0.25 or 7.0.0.5 or later.
What versions of IBM WebSphere Application Server are affected by CVE-2009-2085?
CVE-2009-2085 affects IBM WebSphere Application Server versions 6.1 prior to 6.1.0.25 and 7.0 prior to 7.0.0.5.
What type of attack is possible due to CVE-2009-2085?
CVE-2009-2085 allows remote attackers to bypass intended CSIv2 access restrictions, potentially accessing restricted resources.
Is CVE-2009-2085 related to Enterprise JavaBeans (EJB)?
Yes, CVE-2009-2085 involves vulnerabilities that can be exploited through Enterprise JavaBeans.