IBM Platform Symphony Developer Edition Authentication Bypass Vulnerability

  1. Network Vulnerabilities
  2. Web application abuses
  3. IBM Platform Symphony Developer Edition Authentication Bypass Vulnerability
Summary
This host is running IBM Platform Symphony Developer Edition and is prone to authentication bypass vulnerability.
Impact
Successful exploitation will allow remote attackers to gain access to the local environment. Impact Level: Application.
Solution
Apply the workaround from below link, http://www-01.ibm.com/support/docview.wss?uid=isg3T1020564
Insight
The flaw is in a servlet in the application, which authenticates a user with built-in credentials.
Affected
IBM Platform Symphony Developer Edition 5.2 and 6.1.x through 6.1.1
Detection
Send a crafted exploit string via HTTP GET request and check whether it is able to read the string or not.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities