CVE Vulnerabilities

CVE-2011-1209

Published: May 04, 2011 | Modified: Aug 17, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.17 uses a weak WS-Security XML encryption algorithm, which makes it easier for remote attackers to obtain plaintext data from a (1) JAX-RPC or (2) JAX-WS Web Services request via unspecified vectors related to a decryption attack.

Affected Software

Name Vendor Start Version End Version
Websphere_application_server Ibm 6.1.0 (including) 6.1.0 (including)
Websphere_application_server Ibm 6.1.0.0 (including) 6.1.0.0 (including)
Websphere_application_server Ibm 6.1.0.1 (including) 6.1.0.1 (including)
Websphere_application_server Ibm 6.1.0.2 (including) 6.1.0.2 (including)
Websphere_application_server Ibm 6.1.0.3 (including) 6.1.0.3 (including)
Websphere_application_server Ibm 6.1.0.5 (including) 6.1.0.5 (including)
Websphere_application_server Ibm 6.1.0.7 (including) 6.1.0.7 (including)
Websphere_application_server Ibm 6.1.0.9 (including) 6.1.0.9 (including)
Websphere_application_server Ibm 6.1.0.11 (including) 6.1.0.11 (including)
Websphere_application_server Ibm 6.1.0.12 (including) 6.1.0.12 (including)
Websphere_application_server Ibm 6.1.0.15 (including) 6.1.0.15 (including)
Websphere_application_server Ibm 6.1.0.17 (including) 6.1.0.17 (including)
Websphere_application_server Ibm 6.1.0.19 (including) 6.1.0.19 (including)
Websphere_application_server Ibm 6.1.0.21 (including) 6.1.0.21 (including)
Websphere_application_server Ibm 6.1.0.22 (including) 6.1.0.22 (including)
Websphere_application_server Ibm 6.1.0.23 (including) 6.1.0.23 (including)
Websphere_application_server Ibm 6.1.0.24 (including) 6.1.0.24 (including)
Websphere_application_server Ibm 6.1.0.25 (including) 6.1.0.25 (including)
Websphere_application_server Ibm 6.1.0.27 (including) 6.1.0.27 (including)
Websphere_application_server Ibm 6.1.0.29 (including) 6.1.0.29 (including)
Websphere_application_server Ibm 6.1.0.31 (including) 6.1.0.31 (including)
Websphere_application_server Ibm 6.1.0.32 (including) 6.1.0.32 (including)
Websphere_application_server Ibm 6.1.0.33 (including) 6.1.0.33 (including)
Websphere_application_server Ibm 6.1.0.35 (including) 6.1.0.35 (including)
Websphere_application_server Ibm 6.1.0.37 (including) 6.1.0.37 (including)
Websphere_application_server Ibm 6.1.1 (including) 6.1.1 (including)
Websphere_application_server Ibm 6.1.3 (including) 6.1.3 (including)
Websphere_application_server Ibm 6.1.5 (including) 6.1.5 (including)
Websphere_application_server Ibm 6.1.6 (including) 6.1.6 (including)
Websphere_application_server Ibm 6.1.7 (including) 6.1.7 (including)
Websphere_application_server Ibm 6.1.13 (including) 6.1.13 (including)
Websphere_application_server Ibm 6.1.14 (including) 6.1.14 (including)

References