IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote attackers to bypass X.509 client-certificate authentication. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. No vendor patch available.
IBM
Authentication Bypass
Websphere Application Server
NVD
CVSS 2.0
2.6
EPSS
0.1%