CWE Code: 362
Vulnerability Type: privilege_escalation
CVSS Score: 8.5
CWE Name:  Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Summary: multiple race conditions in ibm websphere application server (was) 8.5 liberty profile before 8.5.5.5 allow remote authenticated users to gain privileges by leveraging thread conflicts that result in java code execution outside the context of the configured ejb run-as user.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2015-04-27
Last Modified Date: 2016-08-04