CVE-2006-2432: IBM WebSphere Application Server

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

IBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) and 5.1.1 (or any earlier cumulative fix) allows EJB access on Solaris systems via a crafted LTPA token.

Affected products

• IBM WebSphere Application Server: version 5.0.0 only; version 5.0.1 only; version 5.0.2 only; version 5.1.0 only; version 5.1.1 only

Published 2006-05-17. Last modified 2026-06-16.