CVE-2011-0679: Infoleak

Published Jan 28, 2011
·
Updated

IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as used in IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal, allows remote attackers to obtain sensitive information via a "modified message."

Affected Software

13 affected components
IBM WebSphere Portal=6.0.1.1
IBM WebSphere Portal=6.0.1.2
IBM WebSphere Portal=6.0.1.3
IBM WebSphere Portal=6.0.1.4
IBM WebSphere Portal=6.0.1.5
IBM WebSphere Portal=6.0.1.6
IBM WebSphere Portal=6.0.1.7
IBM WebSphere Portal=6.1.0.0
IBM WebSphere Portal=6.1.0.1
IBM WebSphere Portal=6.1.0.2
IBM WebSphere Portal=6.1.0.3
IBM WebSphere Portal=6.1.5.0
IBM WebSphere Portal=7.0.0.0

Event History

Jan 28, 2011
CVE Published
via MITRE·08:29 PM
Data Sourced
via MITRE·08:29 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2011-0679?

CVE-2011-0679 has been classified as a moderate severity vulnerability that could allow unauthorized access to sensitive information.

2

How do I fix CVE-2011-0679?

To mitigate CVE-2011-0679, you should apply the latest patches and updates provided by IBM for affected versions of WebSphere Portal.

3

Which versions of IBM WebSphere Portal are affected by CVE-2011-0679?

CVE-2011-0679 affects IBM WebSphere Portal versions from 6.0.1.1 through 7.0.0.0.

4

Can CVE-2011-0679 impact IBM Lotus WCM or IBM Lotus Quickr?

Yes, CVE-2011-0679 may also affect components associated with IBM Lotus Web Content Management and IBM Lotus Quickr when used with affected versions of IBM WebSphere Portal.

5

What type of attack does CVE-2011-0679 involve?

CVE-2011-0679 involves an attack where a remote attacker can exploit a modified message to gain access to sensitive information.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203