IBM WebSphere Application Server Administrative Access Security Bypass Vulnerability

Bugtraq ID:	55309
Class:	Design Error
CVE:	CVE-2012-3325
Remote:	Yes
Local:	No
Published:	Aug 30 2012 12:00AM
Updated:	Nov 11 2014 12:57AM
Credit:	IBM
Vulnerable:	IBM Websphere Application Server 8.0 2 IBM Websphere Application Server 7.0 21 IBM Websphere Application Server 8.0.0.4 IBM Websphere Application Server 7.0.0.23 IBM Websphere Application Server 6.1.0.43 IBM Tivoli Key Lifecycle Manager 1.0 IBM Tivoli Foundations for Application Manager 1.2 IBM Tivoli Foundations for Application Manager 1.1.1 IBM Application Manager for Smart Business 1.2.1
Not Vulnerable:

IBM WebSphere Application Server Administrative Access Security Bypass Vulnerability

IBM WebSphere Application Server (WAS) is prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and gain unauthorized administrative access to the affected application.

IBM WebSphere Application Server Administrative Access Security Bypass Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere Application Server Administrative Access Security Bypass Vulnerability

Solution:
Updates are available; please see the references for more information.

IBM WebSphere Application Server Administrative Access Security Bypass Vulnerability

References: