Test ID:	1.3.6.1.4.1.25623.1.0.806891
Category:	Web Servers
Title:	IBM WebSphere Application Server Liberty Profile Privilege Escalation Vulnerability (Mar 2016)
Summary:	IBM WebSphere Application Server Liberty Profile is prone to a; privilege escalation vulnerability.
Description:	Summary: IBM WebSphere Application Server Liberty Profile is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw will occur when the deployment descriptor security constraints are combined with ServletSecurity annotations on a servlet. Vulnerability Impact: Successful exploitation will allow remote attackers to gain elevated privileges on the system. Affected Software/OS: IBM WebSphere Application Server Liberty Profile version 8.5.x prior to 8.5.5.4. Solution: Update to version 8.5.5.4 or later. CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-8890 AIX APAR: PI29911 http://www-01.ibm.com/support/docview.wss?uid=swg1PI29911 BugTraq ID: 71834 http://www.securityfocus.com/bid/71834 http://www.securitytracker.com/id/1033384 XForce ISS Database: ibm-websphere-cve20148890-priv-escalation(99009) https://exchange.xforce.ibmcloud.com/vulnerabilities/99009
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.