CVE-2011-1312
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
08/03/2011
Last modified:
11/04/2025
Description
The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended access restrictions by mapping a (1) user or (2) group to an administrator role.
Impact
Base Score 2.0
4.00
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page