Test ID:	1.3.6.1.4.1.25623.1.0.801977
Category:	Web Servers
Title:	IBM WebSphere Application Server Directory Traversal Vulnerability (Sep 2011)
Summary:	IBM WebSphere Application Server is prone to a directory; traversal vulnerability.
Description:	Summary: IBM WebSphere Application Server is prone to a directory traversal vulnerability. Vulnerability Insight: The flaw is due to error in administration console which fails to handle certain requests. This allows remote attackers to read arbitrary files via a '../' (dot dot) in the URI. Vulnerability Impact: Successful exploitation will allow attackers to read arbitrary files on the affected application and obtain sensitive information that may lead to further attacks. Affected Software/OS: IBM WebSphere Application Server version 6.1.x prior to 6.1.0.41, 7.0.x prior to 7.0.0.19 and 8.0.x prior to 8.0.0.1. Solution: Update to version 6.1.0.41, 7.0.0.19, 8.0.0.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1359 AIX APAR: PM45322 http://www-01.ibm.com/support/docview.wss?uid=swg1PM45322 BugTraq ID: 49362 http://www.securityfocus.com/bid/49362 http://www.osvdb.org/74817 http://secunia.com/advisories/45749 XForce ISS Database: websphere-admin-console-dir-traversal(69473) https://exchange.xforce.ibmcloud.com/vulnerabilities/69473
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.