VULNERABILITY INTELLIGENCE
CVE-2014-3070
CVSS score5 MEDIUM
EPSS probability2.14%
CISA KEVNot currently listed
Published2014-08-22
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
The addFileRegistryAccount Virtual Member Manager (VMM) SPI Admin Task in IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3 does not properly create accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors.