Skip to content
OpenAdvisories
Unscored CVE-2011-1320 EUVD-2011-1328GHSA-v9jp-7rfg-3xr7

The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when the Tivoli Integrate…

Published Mar 8, 2011 · Updated Sep 17, 2024 · Assigned by mitre

Description

The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when the Tivoli Integrated Portal / embedded WebSphere Application Server (TIP/eWAS) framework is used, does not properly delete AuthCache entries upon a logout, which might allow remote attackers to access the server by leveraging an unattended workstation.

References