CVE-2011-0316 in WebSphere Application Server
Zusammenfassung (Englisch)
The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservieren
06.01.2011
Veröffentlichung
11.01.2011
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 56031 | IBM WebSphere Application Server Administrative Console erweiterte Rechte | 264 | Nicht definiert | Offizieller Fix | CVE-2011-0316 |