CVE-2015-1882

Multiple race conditions in IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 allow remote authenticated users to gain privileges by leveraging thread conflicts that result in Java code execution outside the context of the configured EJB Run-as user.

• CWE-362

• http://www-01.ibm.com/support/docview.wss?uid=swg1PI33357
• http://www-01.ibm.com/support/docview.wss?uid=swg21697368Patch, Vendor Advisory
• http://www.securityfocus.com/bid/74222Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032190Third Party Advisory, VDB Entry
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI33357
• http://www-01.ibm.com/support/docview.wss?uid=swg21697368Patch, Vendor Advisory
• http://www.securityfocus.com/bid/74222Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032190Third Party Advisory, VDB Entry

Published

Apr 27, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1876Directory traversal vulnerability in ES File Explorer 3.2.4.…
• CVE-2015-1877The open_generic_xdg_mime function in xdg-open in xdg-utils …8.8
• CVE-2015-1878Thales nShield Connect hardware models 500, 1500, 6000, 500+…
• CVE-2015-1879Cross-site scripting (XSS) vulnerability in the Google Doc E…
• CVE-2015-1880Cross-site scripting (XSS) vulnerability in the sslvpn login…
• CVE-2015-1881OpenStack Image Registry and Delivery Service (Glance) 2014.…
• CVE-2015-1883IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, …
• CVE-2015-1884Directory traversal vulnerability in IBM Business Process Ma…
• CVE-2015-1885WebSphereOauth20SP.ear in IBM WebSphere Application Server (…
• CVE-2015-1886The Remote Document Conversion Service (DCS) in IBM WebSpher…
• CVE-2015-1887IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF29, 8.0.0 befor…
• CVE-2015-1888Cross-site scripting (XSS) vulnerability in IBM Content Navi…