CVE-2014-3060
HighSummary
Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie.
Risk Assessment
Attackers may gain full control over the device, potentially leading to serious breaches of data and system security within the organization.
Recommendation
It is recommended to update the device to the latest version and implement additional security measures to restrict access to the ObjectGrid network.
Other vulnerabilities in IBM WebSphere DataPower XC10 appliance 2.5
Original NVD description (English source)
Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie.