CVE-2011-0316

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-01-12 · updated 2026-06-16
Weakness: CWE-264

Description

The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request.

Affected products

IBM WebSphere Application Server: 6.1, 6.1.0, 6.1.0.0, 6.1.0.1, 6.1.0.2, 6.1.0.3 (+28)

References

http://secunia.com/advisories/42938
http://www-01.ibm.com/support/docview.wss?uid=swg1PM24372
http://www-01.ibm.com/support/docview.wss?uid=swg27007951
http://www-01.ibm.com/support/docview.wss?uid=swg27014463
http://www.securityfocus.com/bid/46736
http://www.vupen.com/english/advisories/2011/0564
https://exchange.xforce.ibmcloud.com/vulnerabilities/64558
http://secunia.com/advisories/42938
http://www-01.ibm.com/support/docview.wss?uid=swg1PM24372
http://www-01.ibm.com/support/docview.wss?uid=swg27007951
http://www-01.ibm.com/support/docview.wss?uid=swg27014463
http://www.securityfocus.com/bid/46736

Get alerted when CVE-2011-0316 or the next vulnerability affects your stack