CVE-2014-6160: IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used,...

Security readout for executives and security teams

This issue affects IBM WebSphere Service Registry and Repository 8.5 before 8.5.0.1 in a specific Chrome and WebSEAL setup. Logout from the ServiceRegistryDashboard may not end access as intended, so an unattended workstation could expose the prior user’s access. Likely exposure is limited to organizations running IBM WSRR 8.5 earlier than 8.5.0.1 with WebSEAL and Chrome access to ServiceRegistryDashboard. Systems not using that combination are not supported as affected by the provided sources. Treat as a targeted legacy-platform risk rather than a broad emergency. Prioritize remediation where WSRR supports sensitive service governance workflows or is accessed from shared workstations. Mitigation focus: Upgrade affected WSRR 8.5 deployments to 8.5.0.1 or a vendor-supported later version.; Review IBM APAR IV63498 and IBM support guidance before production changes.; Enforce workstation locking and short idle timeouts where WSRR dashboards are accessed..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.