Lucene search

[email protected]CVE-2015-1885

HistoryApr 27, 2015 - 12:59 p.m.

CVE-2015-1885

2015-04-2712:59:03

CWE-264

[email protected]

web.nvd.nist.gov

cve-2015-1885

ibm

websphere

application server

oauth

privilege escalation

nvd

vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%

JSON

WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vectors.

Affected configurations

NVD

Node

ibmwebsphere_application_serverMatch7.0

ibmwebsphere_application_serverMatch7.0.0.1

ibmwebsphere_application_serverMatch7.0.0.2

ibmwebsphere_application_serverMatch7.0.0.3

ibmwebsphere_application_serverMatch7.0.0.10

ibmwebsphere_application_serverMatch7.0.0.11

ibmwebsphere_application_serverMatch7.0.0.12

ibmwebsphere_application_serverMatch7.0.0.13

ibmwebsphere_application_serverMatch7.0.0.14

ibmwebsphere_application_serverMatch7.0.0.15

ibmwebsphere_application_serverMatch7.0.0.16

ibmwebsphere_application_serverMatch7.0.0.17

ibmwebsphere_application_serverMatch7.0.0.18

ibmwebsphere_application_serverMatch7.0.0.19

ibmwebsphere_application_serverMatch7.0.0.21

ibmwebsphere_application_serverMatch7.0.0.22

ibmwebsphere_application_serverMatch7.0.0.23

ibmwebsphere_application_serverMatch7.0.0.24

ibmwebsphere_application_serverMatch7.0.0.25

ibmwebsphere_application_serverMatch7.0.0.27

ibmwebsphere_application_serverMatch7.0.0.29

ibmwebsphere_application_serverMatch7.0.0.31

ibmwebsphere_application_serverMatch7.0.0.32

ibmwebsphere_application_serverMatch7.0.0.33

ibmwebsphere_application_serverMatch7.0.0.34

ibmwebsphere_application_serverMatch7.0.0.35

ibmwebsphere_application_serverMatch7.0.0.36

ibmwebsphere_application_serverMatch7.0.0.37

ibmwebsphere_application_serverMatch7.0.0.38

ibmwebsphere_application_serverMatch8.5.0.0

ibmwebsphere_application_serverMatch8.5.0.1

ibmwebsphere_application_serverMatch8.5.0.2

ibmwebsphere_application_serverMatch8.5.5.0

ibmwebsphere_application_serverMatch8.5.5.1

ibmwebsphere_application_serverMatch8.5.5.2

ibmwebsphere_application_serverMatch8.5.5.3

ibmwebsphere_application_serverMatch8.5.5.4

CPENameOperatorVersion
ibm:websphere_application_serveribm websphere application servereq7.0
ibm:websphere_application_serveribm websphere application servereq7.0.0.1
ibm:websphere_application_serveribm websphere application servereq7.0.0.2
ibm:websphere_application_serveribm websphere application servereq7.0.0.3
ibm:websphere_application_serveribm websphere application servereq7.0.0.10
ibm:websphere_application_serveribm websphere application servereq7.0.0.11
ibm:websphere_application_serveribm websphere application servereq7.0.0.12
ibm:websphere_application_serveribm websphere application servereq7.0.0.13
ibm:websphere_application_serveribm websphere application servereq7.0.0.14
ibm:websphere_application_serveribm websphere application servereq7.0.0.15

CPE	Name	Operator	Version
ibm:websphere_application_server	ibm websphere application server	eq	7.0
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.1
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.2
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.3
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.10
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.11
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.12
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.13
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.14
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.15