Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."
https://exchange.xforce.ibmcloud.com/vulnerabilities/34901
http://www.vupen.com/english/advisories/2007/2234
http://www.securityfocus.com/bid/24505
http://www-1.ibm.com/support/docview.wss?uid=swg27007951