The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly verify X.509 certificates, which allows remote attackers to obtain privileged access via unspecified vectors.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
No history.
Information
Published : 2013-09-20 21:55
Updated : 2024-02-04 18:16
NVD link : CVE-2013-4053
Mitre link : CVE-2013-4053
CVE.ORG link : CVE-2013-4053
JSON object : View
Products Affected
ibm
- websphere_application_server
- websphere_application_server_feature_pack_for_web_services
CWE
CWE-20
Improper Input Validation