CVE-2011-1309

IBM Websphere Application Server - Improper Input Validation

Title source: rule

Description

The Plug-in component in IBM WebSphere Application Server (WAS) before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors.

References (4)

Core 4

Core References

Various Sources vendor-advisory x_refsource_aixapar

http://www-01.ibm.com/support/docview.wss?uid=swg1PM22860

Various Sources x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg27014463

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/46736

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2011/0564

Scores

EPSS 0.0119

EPSS Percentile 64.2%

Details

CWE

CWE-20

Status published

Products (50)

ibm/websphere_application_server 2.0

ibm/websphere_application_server 3.0

ibm/websphere_application_server 3.0.2

ibm/websphere_application_server 3.0.2.1

ibm/websphere_application_server 3.0.2.2

ibm/websphere_application_server 3.0.2.3

ibm/websphere_application_server 3.0.2.4

ibm/websphere_application_server 3.0.21

ibm/websphere_application_server 3.5

ibm/websphere_application_server 3.5.1

... and 40 more

Published Mar 08, 2011

Tracked Since Feb 18, 2026