Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Rational Automation Framework (RAF) 3.x through 3.0.0.5 allows remote attackers to bypass intended Env Gen Wizard (aka Environment Generation Wizard) access restrictions by visiting context roots in HTTP sessions on port 8080.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Rational Automation Framework Web UI 安全绕过漏洞
Vulnerability Description
IBM Rational Automation Framework是一种基于服务器的软件产品,可以自动执行许多IBM WebSphere中间件分发和管理活动。 IBM Rational Automation Framework中存在安全绕过漏洞，该漏洞源于在8080端口上访问Web UI时，应用程序没有校验凭证。攻击者利用该漏洞浏览某些内容的root。以下版本中存在漏洞：3.0、3.0.0.1、3.0.0.2、3.0.0.3、3.0.0.4以及3.0.0.5。
CVSS Information
N/A
Vulnerability Type
N/A