CVE-2011-1368

The JavaServer Faces (JSF) application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg24030916
http://www.ibm.com/support/docview.wss?uid=swg1PM45992
https://exchange.xforce.ibmcloud.com/vulnerabilities/70168
http://www-01.ibm.com/support/docview.wss?uid=swg24030916
http://www.ibm.com/support/docview.wss?uid=swg1PM45992
https://exchange.xforce.ibmcloud.com/vulnerabilities/70168

Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:26

Type	Values Removed	Values Added
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg24030916 -~~	() http://www-01.ibm.com/support/docview.wss?uid=swg24030916 -
References	~~() http://www.ibm.com/support/docview.wss?uid=swg1PM45992 -~~	() http://www.ibm.com/support/docview.wss?uid=swg1PM45992 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/70168 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/70168 -

Information

Published : 2011-10-29 10:55

Updated : 2024-11-21 01:26

NVD link : CVE-2011-1368

Mitre link : CVE-2011-1368

CVE.ORG link : CVE-2011-1368

JSON object : View

Products Affected

ibm

websphere_application_server

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2011-1368", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-10-29T10:55:08.210", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg24030916", "source": "cve@mitre.org"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg1PM45992", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/70168", "source": "cve@mitre.org"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg24030916", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg1PM45992", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/70168", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The JavaServer Faces (JSF) application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors."}, {"lang": "es", "value": "La funcionalidad de aplicaci\u00f3n JavaServer Faces (JSF) de IBM WebSphere Application Server 8.x anteriores a 8.0.0.1 no maneja adecuadamente peticiones, lo que permite a atacantes remotos leer archivos sin especificar a trav\u00e9s de vectores desconocidos."}], "lastModified": "2024-11-21T01:26:09.890", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF1667C5-D19B-469C-82D5-8406B6D75EDE"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}