CVE-2011-1312 | BDVDB-2026-45416 Detail

Description#

The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended access restrictions by mapping a (1) user or (2) group to an administrator role.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg1PK88606
http://www-01.ibm.com/support/docview.wss?uid=swg27014463

Exploit#

No public exploit known

History#

Version 12011-03-08Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.