© 2026 vulntracker.io

CVE-2011-1311

N/A

Published: March 8, 2011 at 09:00 PM UTC

Updated: June 16, 2026 at 11:29 PM UTC

1 product affected across 1 vendorWebSphere Application Server

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.9%

Description

The Security component in IBM WebSphere Application Server (WAS) before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.xmi file, which might allow remote authenticated users to gain privileges in opportunistic circumstances by requesting a service.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

WebSphere Application Server · IBM

95%

v ≤ 7.0.0.132.0 3.0 3.0.2 3.0.2.1 3.0.2.2 3.0.2.3 3.0.2.4 3.0.21 3.5 3.5.1 3.5.2 3.5.3 3.52 4.0.1 4.0.2 4.0.3 4.0.4 5.0 5.0.0 5.0.1 5.0.2 5.0.2.1 5.0.2.10 5.0.2.11 5.0.2.12 5.0.2.13 5.0.2.14 5.0.2.15 5.0.2.16 5.0.2.2 5.0.2.3 5.0.2.4 5.0.2.5 5.0.2.6 5.0.2.7 5.0.2.8 5.0.2.9 5.1.0 5.1.0.2 5.1.0.3 5.1.0.4 5.1.0.5 5.1.1 5.1.1.1 5.1.1.10 5.1.1.11 5.1.1.12 5.1.1.13 5.1.1.14 5.1.1.15 5.1.1.16 5.1.1.17 5.1.1.2 5.1.1.3 5.1.1.4 5.1.1.5 5.1.1.6 5.1.1.7 5.1.1.8 5.1.1.9 6.0 6.0.0.1 6.0.0.2 6.0.0.3 6.0.1 6.0.1.1 6.0.1.11 6.0.1.13 6.0.1.15 6.0.1.17 6.0.1.2 6.0.1.3 6.0.1.5 6.0.1.7 6.0.1.9 6.0.2 6.0.2.1 6.0.2.11 6.0.2.13 6.0.2.15 6.0.2.17 6.0.2.19 6.0.2.2 6.0.2.22 6.0.2.23 6.0.2.24 6.0.2.25 6.0.2.27 6.0.2.28 6.0.2.29 6.0.2.3 6.0.2.30 6.0.2.31 6.0.2.32 6.0.2.4 6.0.2.5 6.0.2.6 6.0.2.7 6.0.2.9 6.1 6.1.0 6.1.0.0 6.1.0.1 6.1.0.11 6.1.0.12 6.1.0.15 6.1.0.17 6.1.0.19 6.1.0.2 6.1.0.21 6.1.0.23 6.1.0.25 6.1.0.27 6.1.0.29 6.1.0.3 6.1.0.31 6.1.0.33 6.1.0.5 6.1.0.7 6.1.0.9 6.1.1 6.1.13 6.1.14 6.1.3 6.1.5 6.1.6 6.1.7 7.0 7.0.0.1 7.0.0.11 7.0.0.2 7.0.0.3 7.0.0.4 7.0.0.5 7.0.0.6 7.0.0.7 7.0.0.8 7.0.0.9

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

http://www-01.ibm.com/support/docview.wss?uid=swg1PM25455

References (2)

Vendor Advisoryx_refsource_AIXAPAR

Source: [email protected]

http://www-01.ibm.com/support/docview.wss?uid=swg1PM25455

x_refsource_CONFIRM

Source: [email protected]

http://www-01.ibm.com/support/docview.wss?uid=swg27014463

CVSS

6MEDIUM[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-264

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card