CVE-2014-6186: Medium severity ibm websphere service registry and repository vulnerability
Published Dec 24, 2014
·Updated
IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph.
Affected Software
15 affected components
IBM WebSphere Service Registry and Repository=6.3.0
IBM WebSphere Service Registry and Repository=6.3.0.1
IBM WebSphere Service Registry and Repository=6.3.0.2
IBM WebSphere Service Registry and Repository=6.3.0.3
IBM WebSphere Service Registry and Repository=6.3.0.4
IBM WebSphere Service Registry and Repository=7.0.0
IBM WebSphere Service Registry and Repository=7.0.0.1
IBM WebSphere Service Registry and Repository=7.0.0.2
IBM WebSphere Service Registry and Repository=7.0.0.3
IBM WebSphere Service Registry and Repository=7.0.0.4
IBM WebSphere Service Registry and Repository=7.0.0.5
IBM WebSphere Service Registry and Repository=7.5.0.0
IBM WebSphere Service Registry and Repository=7.5.0.1
IBM WebSphere Service Registry and Repository=7.5.0.2
IBM WebSphere Service Registry and Repository=8.0
Event History
Dec 24, 2014
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6186?
CVE-2014-6186 is classified as a medium-severity vulnerability.
2
How do I fix CVE-2014-6186?
To resolve CVE-2014-6186, update your IBM WebSphere Service Registry and Repository to the latest version available.
3
What are the affected versions of IBM WebSphere Service Registry and Repository for CVE-2014-6186?
The affected versions include 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1.
4
Can CVE-2014-6186 lead to unauthorized access?
Yes, CVE-2014-6186 allows remote authenticated users to bypass intended object-access restrictions.
5
Is it possible to exploit CVE-2014-6186 remotely?
Yes, CVE-2014-6186 can be exploited by remote authenticated users, making it a serious security risk.