CVE

Id
73463  
CVE No.
CVE-2014-6164  
Status
Candidate  
Description
IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attackers to spoof OpenID and OpenID Connect cookies, and consequently obtain sensitive information, via a crafted URL.  
Phase
Assigned (20140902)  
Votes
None (candidate not yet proposed)  
Comments