CVE-2009-0906

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-08-13 · updated 2026-06-16
Weakness: CWE-287

Description

The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors.

Affected products

IBM WebSphere Application Server: 1.0, 1.0.0.2

References

http://secunia.com/advisories/36306
http://www-01.ibm.com/support/docview.wss?uid=swg27015429
http://www-1.ibm.com/support/docview.wss?uid=swg1PK86047
https://exchange.xforce.ibmcloud.com/vulnerabilities/52074
http://secunia.com/advisories/36306
http://www-01.ibm.com/support/docview.wss?uid=swg27015429
http://www-1.ibm.com/support/docview.wss?uid=swg1PK86047
https://exchange.xforce.ibmcloud.com/vulnerabilities/52074

Get alerted when CVE-2009-0906 or the next vulnerability affects your stack