CVE-2014-6177

Publication date

2014-12-24 11:00:00

Family

ibm

State

PUBLISHED

Description

IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.3 does not perform access-control checks for depth-0 retrieve operations, which allows remote authenticated users to obtain sensitive information via unspecified vectors.