CVE-2009-2092

CVE-2009-2092 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ibm-portlet-ext.xmi, which allows remote attackers to bypass intended access restrictions via unknown vectors.

Learn more about our Cis Benchmark Audit For Ibm Websphere.