CVE-2014-6181: Medium severity ibm websphere service registry and repository vulnerability

Published Dec 24, 2014

Updated

IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access-control checks for contained objects, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

Affected Software

5 affected components

IBM WebSphere Service Registry and Repository=7.0.0

IBM WebSphere Service Registry and Repository=7.0.0.1

IBM WebSphere Service Registry and Repository=7.0.0.2

IBM WebSphere Service Registry and Repository=7.0.0.3

IBM WebSphere Service Registry and Repository=7.0.0.4

Event History

Dec 24, 2014

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6181?

CVE-2014-6181 is classified as a medium severity vulnerability.

How do I fix CVE-2014-6181?

To fix CVE-2014-6181, upgrade IBM WebSphere Service Registry and Repository to version 7.0.0.5 or later.

What are the impacts of CVE-2014-6181?

CVE-2014-6181 allows remote authenticated users to access sensitive information due to a lack of access-control checks.

Which versions of IBM WebSphere Service Registry and Repository are affected by CVE-2014-6181?

CVE-2014-6181 affects versions 7.0.0 through 7.0.0.4 of IBM WebSphere Service Registry and Repository.

Is CVE-2014-6181 a remote code execution vulnerability?

No, CVE-2014-6181 is not a remote code execution vulnerability; it primarily concerns unauthorized access to sensitive information.