Unscored CVE-2011-1359 EUVD-2011-1366GHSA-cx8m-mfqm-j9vm

Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41, 7.0 before 7…

Published Sep 6, 2011 · Updated Aug 6, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41, 7.0 before 7.0.0.19, and 8.0 before 8.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

References

websphere-admin-console-dir-traversal(69473) vdb-entry
45749 third-party-advisory
PM45322 vendor-advisory
49362 vdb-entry
http://www.ibm.com/support/docview.wss?uid=swg21509257
74817 vdb-entry