CVE-2011-1359 — Path Traversal in IBM Websphere Application Server

CWE-22 — Path Traversal4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.2%
top 58.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Websphere Application Server
Timeline
PublishedSep 6
Latest updateMay 17

Description

Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41, 7.0 before 7.0.0.19, and 8.0 before 8.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-cx8m-mfqm-j9vm: Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6↗2022-05-17
▶
CVEList
CVE-2011-1359: Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6↗2011-09-06
▶

💬Community

1
Bugzilla
CVE-2010-4819 X.org: ProcRenderAddGlyphs input sanitization flaw↗2011-09-23
▶
CVE-2011-1359 — Path Traversal in IBM | cvebase