CVE-2011-0316: Medium severity ibm websphere application server feature pack for web services vulnerability
The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0316?
CVE-2011-0316 is considered a medium severity vulnerability due to improper access controls in the Administrative Console of IBM WebSphere Application Server.
How do I fix CVE-2011-0316?
To mitigate CVE-2011-0316, upgrade IBM WebSphere Application Server to version 6.1.0.35 or later, or 7.0.0.15 or later.
What impact does CVE-2011-0316 have on my system?
CVE-2011-0316 allows remote attackers to obtain potentially sensitive status information, which could lead to further exploitation.
Is CVE-2011-0316 present in all versions of WebSphere Application Server?
CVE-2011-0316 affects IBM WebSphere Application Server versions 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15.
Can I still use my IBM WebSphere Application Server if it is affected by CVE-2011-0316?
While you can continue to use an affected version of IBM WebSphere Application Server, it is highly recommended to apply the necessary updates to address CVE-2011-0316.