CVE-2011-0316 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2011-0316

Modified

More Info Official Page

Source-cve@mitre.org

Published At-12 Jan, 2011 | 01:00

Updated At-29 Apr, 2026 | 01:13

The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

IBM Corporation

>>websphere_application_server>>6.1

cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0

cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.0

cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.1

cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.2

cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.3

cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.5

cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.7

cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.9

cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.11

cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.12

cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.13

cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.15

cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.17

cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.19

cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.21

cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.23

cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.25

cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.27

cpe:2.3:a:ibm:websphere_application_server:6.1.0.27:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.29

cpe:2.3:a:ibm:websphere_application_server:6.1.0.29:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.31

cpe:2.3:a:ibm:websphere_application_server:6.1.0.31:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.33

cpe:2.3:a:ibm:websphere_application_server:6.1.0.33:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0

cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.1

cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.2

cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.3

cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.4

cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.5

cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.6

cpe:2.3:a:ibm:websphere_application_server:7.0.0.6:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.7

cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.8

cpe:2.3:a:ibm:websphere_application_server:7.0.0.8:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.9

cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.11

cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.13

cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/42938	cve@mitre.org	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg1PM24372	cve@mitre.org	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg27007951	cve@mitre.org	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg27014463	cve@mitre.org	N/A
http://www.securityfocus.com/bid/46736	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2011/0564	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/64558	cve@mitre.org	N/A
http://secunia.com/advisories/42938	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg1PM24372	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg27007951	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg27014463	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/46736	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0564	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/64558	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://secunia.com/advisories/42938

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1PM24372

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg27007951

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg27014463

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/46736

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0564

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/64558

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/42938

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1PM24372

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg27007951

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg27014463

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/46736

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0564

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/64558

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A