CVE-2009-1172: The JAX-RPC WS-Security runtime in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 bef

A vulnerability (CVE-2009-1172) exists in IBM WebSphere Application Server (WAS), a platform for running web applications, versions 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3 when a specific patch is installed. The flaw is in the JAX-RPC WS-Security runtime (components that handle secure web service communication), which fails to properly validate UsernameToken objects (credentials used to authenticate users), potentially allowing unauthorized access through unknown methods.