Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass authentication and obtain "local environment" access via unknown vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Platform Symphony DE 信任管理漏洞
Vulnerability Description
IBM Platform Symphony是美国IBM公司的一套基于SOA架构的网格计算解决方案。Developer Edition(DE)是一个试用版,能够使开发人员无需使用生产环境中的网格即可快速开发和测试应用程序。 IBM Platform Symphony DE 5.2和6.1.x至6.1.1版本中的servlet中存在信任管理漏洞,该漏洞源于程序使用硬编码证书。远程攻击者可利用该漏洞绕过身份验证,获取‘local environment’访问权限。
CVSS Information
N/A
Vulnerability Type
N/A