VULNERABILITY INTELLIGENCE

CVE-2015-1946

CVSS score4.4 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2015-07-14
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P

Description

IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebSphere Application Server (WAS) 7.0 and 8.0, does not properly implement user roles, which allows local users to gain privileges via unspecified vectors.

Primary references