An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass authentication and obtain "local environment" access via unknown vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/87296
http://www-01.ibm.com/support/docview.wss?uid=isg3T1020564
Source: Mitre, NVD
Published: 2014-02-14
Updated: 2026-06-16
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Severity: Critical
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.03576