CRITICAL🇬🇧 English

CVE-2011-4889

CVSS 9.8v3.0pub. 2018-02-08upd. 2024-11-21

The javax.naming.directory.AttributeInUseException class in the Virtual Member Manager in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.43, 7.0 before 7.0.0.21, and 8.0 before 8.0.0.2 does not properly update passwords on a configuration using Tivoli Directory Server, which might allow remote attackers to gain access to an application by leveraging knowledge of an old password. IBM X-Force ID: 72581.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • IBM Websphere Application Server

    APP
    Ibm
    6.1 – 6.1.0.43 (bez)7.0 – 7.0.0.21 (bez)8.0 – 8.0.0.2 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2015-7450CRITICAL9.8⚠ KEVten sam produkt

Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and m...

CVE-2026-11712CRITICAL9.3ten sam produkt

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the admin...

CVE-2026-11708CRITICAL9.3ten sam produkt

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the admin...

CVE-2026-8644CRITICAL9.1PL ✓ten sam produkt

IBM WebSphere Application Server — podatność na identity spoofing

CVE-2026-9311CRITICAL9.0PL ✓ten sam produkt

RCE w IBM WebSphere Application Server — ominięcie zabezpieczeń