CVEvulnerability
CVE-2011-0316
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-01-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request.
Affected configurations
• ibm websphere application server 6.1
• ibm websphere application server 6.1.0
• ibm websphere application server 6.1.0.0
• ibm websphere application server 6.1.0.1
• ibm websphere application server 6.1.0.2
• ibm websphere application server 6.1.0.3
• ibm websphere application server 6.1.0.5
• ibm websphere application server 6.1.0.7
• ibm websphere application server 6.1.0.9
• ibm websphere application server 6.1.0.11
• ibm websphere application server 6.1.0.12
• ibm websphere application server 6.1.0.13
• ibm websphere application server 6.1.0.15
• ibm websphere application server 6.1.0.17
• ibm websphere application server 6.1.0.19
• ibm websphere application server 6.1.0.21
• ibm websphere application server 6.1.0.23
• ibm websphere application server 6.1.0.25
• ibm websphere application server 6.1.0.27
• ibm websphere application server 6.1.0.29
• ibm websphere application server 6.1.0.31
• ibm websphere application server 6.1.0.33
• ibm websphere application server 7.0
• ibm websphere application server 7.0.0.1
• ibm websphere application server 7.0.0.2
• ibm websphere application server 7.0.0.3
• ibm websphere application server 7.0.0.4
• ibm websphere application server 7.0.0.5
• ibm websphere application server 7.0.0.6
• ibm websphere application server 7.0.0.7
• ibm websphere application server 7.0.0.8
• ibm websphere application server 7.0.0.9
• ibm websphere application server 7.0.0.11
• ibm websphere application server 7.0.0.13
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/42938 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM24372 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27007951 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463 www-01.ibm.com
- http://www.securityfocus.com/bid/46736 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0564 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64558 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/42938 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM24372 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27007951 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463 www-01.ibm.com
- http://www.securityfocus.com/bid/46736 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0564 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64558 exchange.xforce.ibmcloud.com