Skip to content
OpenAdvisories
Unscored CVE-2011-1312 EUVD-2011-1320GHSA-gpph-v39p-r2xx

The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not pre…

Published Mar 8, 2011 · Updated Sep 17, 2024 · Assigned by mitre

Description

The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended access restrictions by mapping a (1) user or (2) group to an administrator role.

References