NVD

Id
8270  
Name
CVE-2011-1312  
Description
The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended access restrictions by mapping a (1) user or (2) group to an administrator role.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-03-08  
Modified Date
2011-04-07  
Seq
2011-1312  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
47509 8270 CVE-2011-1312 PK88606  View
47510 8270 CVE-2011-1312 http://www-01.ibm.com/support/docview.wss?uid=swg27014463  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41638 JVNDB-2009-002645 IBM WebSphere Application Server の管理コンソールコンポーネントにおけるアクセス制限を回避される脆弱性 IBM WebSphere Application Server (WAS) の管理コンソールコンポーネントには、プライマリ管理者 ID の変更を適切に防止しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2011-1312 49219 CVE-2011-1312 8270 4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002645.html 2009-06-11 2011-04-07 View