IBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) and 5.1.1 (or any earlier cumulative fix) allows EJB access on Solaris systems via a crafted LTPA token.
| Software | From | Fixed in |
|---|---|---|
| ibm / websphere_application_server | 5.0.0 | 5.0.0.x |
| ibm / websphere_application_server | 5.1.1 | 5.1.1.x |
| ibm / websphere_application_server | 5.1.0 | 5.1.0.x |
| ibm / websphere_application_server | 5.0.1 | 5.0.1.x |
| ibm / websphere_application_server | 5.0.2 | 5.0.2.x |