Security Advisory
CVE-2014-6164
5
Vulnerability Description
IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attackers to spoof OpenID and OpenID Connect cookies, and consequently obtain sensitive information, via a crafted URL.
Published Date
December 18, 2014
Official Source
NIST NVD Advisory