CVE-2011-1377 The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server (WAS) 6.1 does not properly handle the enabling of WS-Security for a JAX-WS ap...
HighCVSS 10.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server (WAS) 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | = 6.1 | No fix listed |
| ibm websphere application server | = 6.1.0 | No fix listed |
| ibm websphere application server | = 6.1.0.0 | No fix listed |
| ibm websphere application server | = 6.1.0.1 | No fix listed |
| ibm websphere application server | = 6.1.0.2 | No fix listed |
| ibm websphere application server | = 6.1.0.3 | No fix listed |
| ibm websphere application server | = 6.1.0.5 | No fix listed |
| ibm websphere application server | = 6.1.0.7 | No fix listed |
| ibm websphere application server | = 6.1.0.9 | No fix listed |
| ibm websphere application server | = 6.1.0.11 | No fix listed |
| ibm websphere application server | = 6.1.0.12 | No fix listed |
| ibm websphere application server | = 6.1.0.15 | No fix listed |
| ibm websphere application server | = 6.1.0.17 | No fix listed |
| ibm websphere application server | = 6.1.0.19 | No fix listed |
| ibm websphere application server | = 6.1.0.21 | No fix listed |
| ibm websphere application server | = 6.1.0.23 | No fix listed |
| ibm websphere application server | = 6.1.0.25 | No fix listed |
| ibm websphere application server | = 6.1.0.27 | No fix listed |
| ibm websphere application server | = 6.1.0.29 | No fix listed |
| ibm websphere application server | = 6.1.0.31 | No fix listed |
| ibm websphere application server | = 6.1.0.33 | No fix listed |
| ibm websphere application server | = 6.1.0.35 | No fix listed |
| ibm websphere application server | = 6.1.0.37 | No fix listed |
| ibm websphere application server | = 6.1.0.39 | No fix listed |
| ibm websphere application server | = 6.1.1 | No fix listed |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | = 6.1.3 | No fix listed |
| ibm websphere application server | = 6.1.5 | No fix listed |
| ibm websphere application server | = 6.1.6 | No fix listed |
| ibm websphere application server | = 6.1.7 | No fix listed |
| ibm websphere application server | = 6.1.13 | No fix listed |
| ibm websphere application server | = 6.1.14 | No fix listed |
References
- 46469 third-party-advisory vendor-advisory
- PM43792 vendor-advisory
- PM50205 vendor-advisory
- www-01.ibm.com
- 50310 vdb-entry
- was-wssecurity-unspecified(72299) vdb-entry