CVE-2014-6177

Published: Dec 24, 2014Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.3 does not perform access-control checks for depth-0 retrieve operations, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

Affected (8)

Products: Ibm: Websphere Service Registry And Repository

Ibm

1 product

Websphere Service Registry And Repository

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Service Registry And Repository	Version 7.0.0.1
Ibm Websphere Service Registry And Repository	Version 7.0.0.2
Ibm Websphere Service Registry And Repository	Version 7.0.0.3
Ibm Websphere Service Registry And Repository	Version 7.0.0.4
Ibm Websphere Service Registry And Repository	Version 7.0.0
Ibm Websphere Service Registry And Repository	Version 7.5.0.0
Ibm Websphere Service Registry And Repository	Version 7.5.0.1
Ibm Websphere Service Registry And Repository	Version 7.5.0.2