CVE-2014-8890

CVE-2014-8890 describes a privilege escalation vulnerability in IBM WebSphere Application Server Liberty Profile versions 8.5.x prior to 8.5.5.4. This flaw allows remote attackers to elevate privileges by exploiting a weakness in how the server combines servlet deployment descriptor security constraints with ServletSecurity annotations. The vulnerability has a CVSS score of 5.1, indicating a medium severity, and requires high attack complexity (AC:H) for an unauthenticated attacker (Au:N) to achieve partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.