VULNERABILITY INTELLIGENCE

CVE-2009-0906

CVSS score6.5 MEDIUM
EPSS probability1.21%
CISA KEVNot currently listed
Published2009-08-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors.

Weakness classification

  • CWE-287: Improper Authentication

Primary references