PT-2010-1269 · Ibm · Websphere Service Registry/Repository

Published 2010-02-04 · Updated 2017-08-17 · CVE-2009-2750

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository (WSRR) version 6.3.0 before FP2

Description The issue allows remote authenticated users to obtain unspecified data access via a property query due to missing intended configuration properties.

Recommendations For IBM WebSphere Service Registry and Repository (WSRR) version 6.3.0, apply FP2 to include the necessary configuration properties and prevent unauthorized data access.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2009-2750

Affected Products

Websphere Service Registry/Repository

References · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg24025456 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2750 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ66279 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55744 · Note