CVE-2014-6160: IBM WebSphere Service Registry And Repository

Low severity, CVSS 2.1. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not properly process ServiceRegistryDashboard logout actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation.

Affected products

• IBM WebSphere Service Registry And Repository: version 8.5 only

Published 2014-12-29. Last modified 2026-06-17.