cbcvebase.
CVE-2009-2092
published 2009-08-13

CVE-2009-2092: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ibm-portlet-ext.xmi, which allows…

high7.5CVSS 3.1
AVNACLAuNCPIPAP
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ibm-portlet-ext.xmi, which allows remote attackers to bypass intended access restrictions via unknown vectors.

Affected

4 ranges
VendorProductVersion rangeFixed in
ibmwebsphere_application_server——
ibmwebsphere_application_server——
ibmwebsphere_application_server——
ibmwebsphere_application_server——
CVE-2009-2092 — Improper Access Control in IBM | cvebase