WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vectors.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vectors.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg21963275 | x_refsource_CONFIRM |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PI33202 | vendor-advisory x_refsource_AIXAPAR |
| http://www.securitytracker.com/id/1032190 | vdb-entry x_refsource_SECTRACK |
| http://www-01.ibm.com/support/docview.wss?uid=swg21697368 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/74219 | vdb-entry x_refsource_BID |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PI36211 | vendor-advisory x_refsource_AIXAPAR |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg21963275 | x_refsource_CONFIRM x_transferred |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PI33202 | vendor-advisory x_refsource_AIXAPAR x_transferred |
| http://www.securitytracker.com/id/1032190 | vdb-entry x_refsource_SECTRACK x_transferred |
| http://www-01.ibm.com/support/docview.wss?uid=swg21697368 | x_refsource_CONFIRM x_transferred |
| http://www.securityfocus.com/bid/74219 | vdb-entry x_refsource_BID x_transferred |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PI36211 | vendor-advisory x_refsource_AIXAPAR x_transferred |
WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vectors.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 9.3 | HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |