| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | = 7.0= 7.0.0.1= 7.0.0.3= 7.0.0.4 |
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ibm-portlet-ext.xmi, which allows remote attackers to bypass intended access restrictions via unknown vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free