CVE-2011-1359 in WebSphere Application Server

Summary

Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41, 7.0 before 7.0.0.19, and 8.0 before 8.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 03/10/2011
• Disclosure: 09/06/2011
• Moderation: VulDB entry created
• Entries: VDB-58434 (1)
• CPE: ready
• CWE: CWE-22 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00193
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-1359
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-1359
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-1359/