CVE-2015-1946

Published: Jul 14, 2015Modified: May 6, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebSphere Application Server (WAS) 7.0 and 8.0, does not properly implement user roles, which allows local users to gain privileges via unspecified vectors.

Affected (17)

Products: Ibm: Websphere Application Server, Websphere Virtual Enterprise

Ibm

2 products

Websphere Application Server

Websphere Virtual Enterprise

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	Version 7.0
Ibm Websphere Application Server	Version 8.0.0.0
Ibm Websphere Application Server	Version 8.5.0.0
Ibm Websphere Application Server	Version 8.5.0.1
Ibm Websphere Application Server	Version 8.5.0.2
Ibm Websphere Application Server	Version 8.5.5.0
Ibm Websphere Application Server	Version 8.5.5.1
Ibm Websphere Application Server	Version 8.5.5.2
Ibm Websphere Application Server	Version 8.5.5.3
Ibm Websphere Application Server	Version 8.5.5.4
Ibm Websphere Application Server	Version 8.5.5.5

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Virtual Enterprise	Version 7.0.0.1
Ibm Websphere Virtual Enterprise	Version 7.0.0.2
Ibm Websphere Virtual Enterprise	Version 7.0.0.3
Ibm Websphere Virtual Enterprise	Version 7.0.0.4
Ibm Websphere Virtual Enterprise	Version 7.0.0.5
Ibm Websphere Virtual Enterprise	Version 7.0