← Database

CVE-2006-6136

CRITICAL CVSS: 10.0 Published: 2006-11-28 Modified: 2026-06-16

Description

IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) does not perform EAL4 authentication checks at the proper time during "registering of response operation," which has unknown impact and attack vectors.

Affected Platforms

Ibm Websphere Application Server

Weakness Type

NVD-CWE-noinfo

References