CVE-2011-1209 in WebSphere Application Server

Summary

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.17 uses a weak WS-Security XML encryption algorithm, which makes it easier for remote attackers to obtain plaintext data from a (1) JAX-RPC or (2) JAX-WS Web Services request via unspecified vectors related to a "decryption attack."

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 03/03/2011
• Disclosure: 05/04/2011
• Moderation: VulDB entry created
• Entries: 1: VDB-57343
• CPE: ready
• CWE: CWE-310 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00126
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-1209
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-1209
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-1209/