IBM WebSphere Application Server for z/OS Local Unauthorized Access Vulnerability

Bugtraq ID:	47122
Class:	Access Validation Error
CVE:	CVE-2011-1683
Remote:	No
Local:	Yes
Published:	Mar 31 2011 12:00AM
Updated:	Mar 19 2015 07:35AM
Credit:	IBM
Vulnerable:	IBM WebSphere Application Server for z/OS 7.0.0.15 IBM WebSphere Application Server for z/OS 7.0 IBM WebSphere Application Server for z/OS 6.1.0.35 IBM WebSphere Application Server for z/OS 6.1 IBM WebSphere Application Server for z/OS 6.0.2.43 IBM WebSphere Application Server for z/OS 6.0
Not Vulnerable:

IBM WebSphere Application Server for z/OS Local Unauthorized Access Vulnerability

IBM WebSphere Application Server for z/OS is prone to a local unauthorized-access vulnerability.

Attackers can exploit this issue to gain unauthorized access to WebSphere applications. This may lead to further attacks.

IBM WebSphere Application Server for z/OS Local Unauthorized Access Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere Application Server for z/OS Local Unauthorized Access Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.

IBM WebSphere Application Server for z/OS Local Unauthorized Access Vulnerability

References:

• IBM Websphere Homepage (IBM)
  
• Potential security exposure with IBM WebSphere Application Server on z/OS runnin (IBM)