Security Advisory

CVE-2009-2092

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-08-13 18:00:00
Last updated 2024-08-07 05:36:20
Assigner mitre
State PUBLISHED

Description

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ibm-portlet-ext.xmi, which allows remote attackers to bypass intended access restrictions via unknown vectors.