← Database

CVE-2009-2092

HIGH CVSS: 7.5 Published: 2009-08-13 Modified: 2026-06-16

Description

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ibm-portlet-ext.xmi, which allows remote attackers to bypass intended access restrictions via unknown vectors.

Affected Platforms

Ibm Websphere Application Server

Weakness Type

CWE-284

References