Security Advisory
CVE-2016-0323
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The Auto-Scaling agent in Liberty for Java in IBM Bluemix before 2.7-20160321-1358 allows remote authenticated users to disable X.509 certificate validation, and consequently bypass an intended HTTPS trust-management feature, via unspecified vectors.