8.0Hoch
CVE-2026-95680IBM WebSphere Application Server is affected by an authorization bypass
Beschreibung
IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.
Schwachstellentyp (CWE):
CWE-287
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| IBM | WebSphere Application Server | 8.5, 9.0 |
Referenzen und Patches
- https://www.ibm.com/support/pages/node/7292213 vendor-advisorypatch