The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly verify X.509 certificates, which allows remote attackers to obtain privileged access via unspecified vectors.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
21 Nov 2024, 01:54
Type | Values Removed | Values Added |
---|---|---|
References | () http://www-01.ibm.com/support/docview.wss?uid=swg1PM90949 - | |
References | () http://www-01.ibm.com/support/docview.wss?uid=swg1PM91521 - | |
References | () http://www.ibm.com/support/docview.wss?uid=swg21647522 - Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/86505 - |
Information
Published : 2013-09-20 21:55
Updated : 2024-11-21 01:54
NVD link : CVE-2013-4053
Mitre link : CVE-2013-4053
CVE.ORG link : CVE-2013-4053
JSON object : View
Products Affected
ibm
- websphere_application_server_feature_pack_for_web_services
- websphere_application_server
CWE
CWE-20
Improper Input Validation