CVE-2011-1311

Published: Mar 8, 2011Modified: Apr 29, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

The Security component in IBM WebSphere Application Server (WAS) before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.xmi file, which might allow remote authenticated users to gain privileges in opportunistic circumstances by requesting a service.

Affected (139)

Products: Ibm: Websphere Application Server

Ibm

1 product

Websphere Application Server

Configuration A

139 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	Up to 7.0.0.13
Ibm Websphere Application Server	Version 2.0
Ibm Websphere Application Server	Version 3.0.2.1
Ibm Websphere Application Server	Version 3.0.2.2
Ibm Websphere Application Server	Version 3.0.2.3
Ibm Websphere Application Server	Version 3.0.2.4
Ibm Websphere Application Server	Version 3.0.21
Ibm Websphere Application Server	Version 3.0.2
Ibm Websphere Application Server	Version 3.0
Ibm Websphere Application Server	Version 3.5.1
Ibm Websphere Application Server	Version 3.5.2
Ibm Websphere Application Server	Version 3.5.3
Ibm Websphere Application Server	Version 3.52
Ibm Websphere Application Server	Version 3.5
Ibm Websphere Application Server	Version 4.0.1
Ibm Websphere Application Server	Version 4.0.2
Ibm Websphere Application Server	Version 4.0.3
Ibm Websphere Application Server	Version 4.0.4
Ibm Websphere Application Server	Version 5.0.0
Ibm Websphere Application Server	Version 5.0.1
Ibm Websphere Application Server	Version 5.0.2.10
Ibm Websphere Application Server	Version 5.0.2.11
Ibm Websphere Application Server	Version 5.0.2.12
Ibm Websphere Application Server	Version 5.0.2.13
Ibm Websphere Application Server	Version 5.0.2.14
Ibm Websphere Application Server	Version 5.0.2.15
Ibm Websphere Application Server	Version 5.0.2.16
Ibm Websphere Application Server	Version 5.0.2.1
Ibm Websphere Application Server	Version 5.0.2.2
Ibm Websphere Application Server	Version 5.0.2.3
Ibm Websphere Application Server	Version 5.0.2.4
Ibm Websphere Application Server	Version 5.0.2.5
Ibm Websphere Application Server	Version 5.0.2.6
Ibm Websphere Application Server	Version 5.0.2.7
Ibm Websphere Application Server	Version 5.0.2.8
Ibm Websphere Application Server	Version 5.0.2.9
Ibm Websphere Application Server	Version 5.0.2
Ibm Websphere Application Server	Version 5.0
Ibm Websphere Application Server	Version 5.1.0.2
Ibm Websphere Application Server	Version 5.1.0.3
Ibm Websphere Application Server	Version 5.1.0.4
Ibm Websphere Application Server	Version 5.1.0.5
Ibm Websphere Application Server	Version 5.1.0
Ibm Websphere Application Server	Version 5.1.1.10
Ibm Websphere Application Server	Version 5.1.1.11
Ibm Websphere Application Server	Version 5.1.1.12
Ibm Websphere Application Server	Version 5.1.1.13
Ibm Websphere Application Server	Version 5.1.1.14
Ibm Websphere Application Server	Version 5.1.1.15
Ibm Websphere Application Server	Version 5.1.1.16
Ibm Websphere Application Server	Version 5.1.1.17
Ibm Websphere Application Server	Version 5.1.1.1
Ibm Websphere Application Server	Version 5.1.1.2
Ibm Websphere Application Server	Version 5.1.1.3
Ibm Websphere Application Server	Version 5.1.1.4
Ibm Websphere Application Server	Version 5.1.1.5
Ibm Websphere Application Server	Version 5.1.1.6
Ibm Websphere Application Server	Version 5.1.1.7
Ibm Websphere Application Server	Version 5.1.1.8
Ibm Websphere Application Server	Version 5.1.1.9
Ibm Websphere Application Server	Version 5.1.1
Ibm Websphere Application Server	Version 6.0.0.1
Ibm Websphere Application Server	Version 6.0.0.2
Ibm Websphere Application Server	Version 6.0.0.3
Ibm Websphere Application Server	Version 6.0.1.11
Ibm Websphere Application Server	Version 6.0.1.13
Ibm Websphere Application Server	Version 6.0.1.15
Ibm Websphere Application Server	Version 6.0.1.17
Ibm Websphere Application Server	Version 6.0.1.1
Ibm Websphere Application Server	Version 6.0.1.2
Ibm Websphere Application Server	Version 6.0.1.3
Ibm Websphere Application Server	Version 6.0.1.5
Ibm Websphere Application Server	Version 6.0.1.7
Ibm Websphere Application Server	Version 6.0.1.9
Ibm Websphere Application Server	Version 6.0.1
Ibm Websphere Application Server	Version 6.0.2.11
Ibm Websphere Application Server	Version 6.0.2.13
Ibm Websphere Application Server	Version 6.0.2.15
Ibm Websphere Application Server	Version 6.0.2.17
Ibm Websphere Application Server	Version 6.0.2.19
Ibm Websphere Application Server	Version 6.0.2.1
Ibm Websphere Application Server	Version 6.0.2.22
Ibm Websphere Application Server	Version 6.0.2.23
Ibm Websphere Application Server	Version 6.0.2.24
Ibm Websphere Application Server	Version 6.0.2.25
Ibm Websphere Application Server	Version 6.0.2.27
Ibm Websphere Application Server	Version 6.0.2.28
Ibm Websphere Application Server	Version 6.0.2.29
Ibm Websphere Application Server	Version 6.0.2.2
Ibm Websphere Application Server	Version 6.0.2.30
Ibm Websphere Application Server	Version 6.0.2.31
Ibm Websphere Application Server	Version 6.0.2.32
Ibm Websphere Application Server	Version 6.0.2.3
Ibm Websphere Application Server	Version 6.0.2.4
Ibm Websphere Application Server	Version 6.0.2.5
Ibm Websphere Application Server	Version 6.0.2.6
Ibm Websphere Application Server	Version 6.0.2.7
Ibm Websphere Application Server	Version 6.0.2.9
Ibm Websphere Application Server	Version 6.0.2
Ibm Websphere Application Server	Version 6.0
Ibm Websphere Application Server	Version 6.1.0.0
Ibm Websphere Application Server	Version 6.1.0.11
Ibm Websphere Application Server	Version 6.1.0.12
Ibm Websphere Application Server	Version 6.1.0.15
Ibm Websphere Application Server	Version 6.1.0.17
Ibm Websphere Application Server	Version 6.1.0.19
Ibm Websphere Application Server	Version 6.1.0.1
Ibm Websphere Application Server	Version 6.1.0.21
Ibm Websphere Application Server	Version 6.1.0.23
Ibm Websphere Application Server	Version 6.1.0.25
Ibm Websphere Application Server	Version 6.1.0.27
Ibm Websphere Application Server	Version 6.1.0.29
Ibm Websphere Application Server	Version 6.1.0.2
Ibm Websphere Application Server	Version 6.1.0.31
Ibm Websphere Application Server	Version 6.1.0.33
Ibm Websphere Application Server	Version 6.1.0.3
Ibm Websphere Application Server	Version 6.1.0.5
Ibm Websphere Application Server	Version 6.1.0.7
Ibm Websphere Application Server	Version 6.1.0.9
Ibm Websphere Application Server	Version 6.1.0
Ibm Websphere Application Server	Version 6.1.13
Ibm Websphere Application Server	Version 6.1.14
Ibm Websphere Application Server	Version 6.1.1
Ibm Websphere Application Server	Version 6.1.3
Ibm Websphere Application Server	Version 6.1.5
Ibm Websphere Application Server	Version 6.1.6
Ibm Websphere Application Server	Version 6.1.7
Ibm Websphere Application Server	Version 6.1
Ibm Websphere Application Server	Version 7.0.0.11
Ibm Websphere Application Server	Version 7.0.0.1
Ibm Websphere Application Server	Version 7.0.0.2
Ibm Websphere Application Server	Version 7.0.0.3
Ibm Websphere Application Server	Version 7.0.0.4
Ibm Websphere Application Server	Version 7.0.0.5
Ibm Websphere Application Server	Version 7.0.0.6
Ibm Websphere Application Server	Version 7.0.0.7
Ibm Websphere Application Server	Version 7.0.0.8
Ibm Websphere Application Server	Version 7.0.0.9
Ibm Websphere Application Server	Version 7.0

Related CWEs

CWE-264

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg1PM25455

Source: cve@mitre.org

http://www-01.ibm.com/support/docview.wss?uid=swg27014463

Source: cve@mitre.org

http://www-01.ibm.com/support/docview.wss?uid=swg1PM25455

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg27014463

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.