CVE-2015-7447

CWE-200 — Information Exposure3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.2%
top 51.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Websphere Portal
Timeline
PublishedDec 31
Latest updateMay 17

Description

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF09 allows remote attackers to bypass intended Portal AccessControl REST API access restrictions and obtain sensitive information via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages1 packages

▶NVDibm/websphere_portal17 versions+16

🔴Vulnerability Details

2
GHSA
GHSA-pqfx-v9rx-x5xq: IBM WebSphere Portal 6↗2022-05-17
▶
CVEList
CVE-2015-7447: IBM WebSphere Portal 6↗2015-12-31
▶
CVE-2015-7447 (MEDIUM CVSS 5.3) | IBM WebSphere Portal 6.1.0 through | cvebase.io