IBM WebSphere Application Server Liberty Profile 8.5.x before 8.5.5.4 allows remote attackers to gain privileges by leveraging the combination of a servlet’s deployment descriptor security constraints and ServletSecurity annotations.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8890
Reference (s):
- AIXAPAR:PI29911
- URL: http://www-01.ibm.com/support/docview.wss?uid=swg1PI29911
- BID:71834
- URL: http://www.securityfocus.com/bid/71834
- http://www-01.ibm.com/support/docview.wss?uid=swg21690185