CVE-2011-0316 in WebSphere Application Server
Summary
The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/06/2011
Disclosure
01/11/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56031 | IBM WebSphere Application Server Administrative Console access control | 264 | Not defined | Official fix | CVE-2011-0316 |