Lucene search
HistoryDec 22, 2010 - 9:00 p.m.
CVE-2010-2644
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.003
Percentile
69.1%
IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which allows remote attackers to perform governance actions via unspecified API requests to an EJB interface.
Affected configurations
Node
ibmwebsphere_service_registry_and_repositoryMatch7.0.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | websphere_service_registry_and_repository | 7.0.0 | cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.0.0:*:*:*:*:*:*:* |
Related
nessus
nessus
prion
prion
Improper access control
2010-12-22 21:00:00
cve
cve
CVE-2010-2644
2010-12-22 21:00:01
cvelist
cvelist
CVE-2010-2644
2010-12-22 20:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.003
Percentile
69.1%
Related for NVD:CVE-2010-2644