PT-2011-3290
CVE-2011-1683
·
Published
2011-04-13
·
Updated
2011-04-21
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
IBM WebSphere Application Server (WAS) versions 6.0.x through 6.0.2.43
IBM WebSphere Application Server (WAS) versions 6.1.x before 6.1.0.37
IBM WebSphere Application Server (WAS) versions 7.0.x before 7.0.0.17
Description
The issue allows remote attackers to obtain unspecified application access via unknown vectors when a Local OS user registry or Federated Repository with RACF adapter is used.
Recommendations
For versions 6.0.x through 6.0.2.43, update to a version after 6.0.2.43.
For versions 6.1.x before 6.1.0.37, update to version 6.1.0.37 or later.
For versions 7.0.x before 7.0.0.17, update to version 7.0.0.17 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾