CVE-2011-1312

CVE-2011-1312 affects IBM WebSphere Application Server (WAS) Administrative Console. The vulnerability concerns WAS 6.1.0.x (before 6.1.0.31) and 7.x (before 7.0.0.15), where remote authenticated administrators could bypass access restrictions by mapping a (1) user or (2) group to an administrato...

CVE-2011-1312

The Administrative Console component in IBM WebSphere Application Server WAS 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended access restrictions by mapping a 1 user or 2 gro...