CVEvulnerability
CVE-2011-1368
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-10-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The JavaServer Faces (JSF) application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors.
Affected configurations
• ibm websphere application server 8.0.0.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg24030916 www-01.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg1PM45992 www.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70168 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg24030916 www-01.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg1PM45992 www.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70168 exchange.xforce.ibmcloud.com