IBM WebSphere Application Server Administration Console Local Information Disclosure Vulnerability
BID:48709
Info
IBM WebSphere Application Server Administration Console Local Information Disclosure Vulnerability
| Bugtraq ID: | 48709 |
| Class: | Design Error |
| CVE: |
CVE-2011-1356 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 16 2011 12:00AM |
| Updated: | Jul 16 2011 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM Websphere Application Server 8.0.0.4 IBM Websphere Application Server 6.1 |
| Not Vulnerable: |
IBM Websphere Application Server 7.0.0.19 IBM Websphere Application Server 6.1.0.39 |
Discussion
IBM WebSphere Application Server Administration Console Local Information Disclosure Vulnerability
IBM WebSphere Application Server is prone to a local information-disclosure vulnerability.
Exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks.
IBM WebSphere Application Server 6.1 and 7.0 are vulnerable; other versions may also be affected.
IBM WebSphere Application Server is prone to a local information-disclosure vulnerability.
Exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks.
IBM WebSphere Application Server 6.1 and 7.0 are vulnerable; other versions may also be affected.
Exploit / POC
IBM WebSphere Application Server Administration Console Local Information Disclosure Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM WebSphere Application Server Administration Console Local Information Disclosure Vulnerability
Solution:
IBM has released fixes. Please see the reference for more information.
Solution:
IBM has released fixes. Please see the reference for more information.