CVE-2013-0540
CVE-2013-0540
IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.0.2, when SSL is not enabled, does not properly validate authentication cookies, which allows remote authenticated users to bypass intended access restrictions via an HTTP session.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →