Lucene search
MitreCVELIST:CVE-2011-1311HistoryMar 08, 2011 - 9:00 p.m.
CVE-2011-1311
2011-03-0821:00:00
mitre
www.cve.org
6
ibm
websphere
application server
security
role mapping
vulnerability
j2ee 1.4
remote authenticated users
gain privileges
The Security component in IBM WebSphere Application Server (WAS) before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.xmi file, which might allow remote authenticated users to gain privileges in opportunistic circumstances by requesting a service.
Related
cve
cve
CVE-2011-1311
2011-03-08 21:59:34
nvd
nvd
CVE-2011-1311
2011-03-08 21:59:34
prion
prion
Design/Logic Flaw
2011-03-08 21:59:00
openvas
openvas
IBM WebSphere Application Server (WAS) Multiple Vulnerabilities - March 2011
2011-03-22 00:00:00
IBM WebSphere Application Server (WAS) Multiple Vulnerabilities (Mar 2011)
2011-03-22 00:00:00
nessus
nessus
IBM WebSphere Application Server 7.0 < Fix Pack 15 Multiple Vulnerabilities
2011-03-10 00:00:00