CVE-2011-1683
UnknownEPSS 1.72%
Last modified
CVE-2011-1683 is a vulnerability of currently unknown severity. IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors.. EPSS estimates a 1.72% chance of exploitation in the next 30 days.
Description
IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Websphere Application Server | 6.0 |
| Ibm | Websphere Application Server | 6.0.0.1 |
| Ibm | Websphere Application Server | 6.0.0.2 |
| Ibm | Websphere Application Server | 6.0.0.3 |
| Ibm | Websphere Application Server | 6.0.1 |
| Ibm | Websphere Application Server | 6.0.1.1 |
| Ibm | Websphere Application Server | 6.0.1.2 |
| Ibm | Websphere Application Server | 6.0.1.3 |
| Ibm | Websphere Application Server | 6.0.1.5 |
| Ibm | Websphere Application Server | 6.0.1.7 |
| Ibm | Websphere Application Server | 6.0.1.9 |
| Ibm | Websphere Application Server | 6.0.1.11 |
| Ibm | Websphere Application Server | 6.0.1.13 |
| Ibm | Websphere Application Server | 6.0.1.15 |
| Ibm | Websphere Application Server | 6.0.1.17 |
| Ibm | Websphere Application Server | 6.0.2 |
| Ibm | Websphere Application Server | 6.0.2.1 |
| Ibm | Websphere Application Server | 6.0.2.2 |
| Ibm | Websphere Application Server | 6.0.2.3 |
| Ibm | Websphere Application Server | 6.0.2.4 |
| Ibm | Websphere Application Server | 6.0.2.5 |
| Ibm | Websphere Application Server | 6.0.2.6 |
| Ibm | Websphere Application Server | 6.0.2.7 |
| Ibm | Websphere Application Server | 6.0.2.8 |
| Ibm | Websphere Application Server | 6.0.2.9 |
| Ibm | Websphere Application Server | 6.0.2.10 |
| Ibm | Websphere Application Server | 6.0.2.11 |
| Ibm | Websphere Application Server | 6.0.2.12 |
| Ibm | Websphere Application Server | 6.0.2.13 |
| Ibm | Websphere Application Server | 6.0.2.15 |
| Ibm | Websphere Application Server | 6.0.2.16 |
| Ibm | Websphere Application Server | 6.0.2.17 |
| Ibm | Websphere Application Server | 6.0.2.18 |
| Ibm | Websphere Application Server | 6.0.2.19 |
| Ibm | Websphere Application Server | 6.0.2.20 |
| Ibm | Websphere Application Server | 6.0.2.21 |
| Ibm | Websphere Application Server | 6.0.2.22 |
| Ibm | Websphere Application Server | 6.0.2.23 |
| Ibm | Websphere Application Server | 6.0.2.24 |
| Ibm | Websphere Application Server | 6.0.2.25 |
| Ibm | Websphere Application Server | 6.0.2.27 |
| Ibm | Websphere Application Server | 6.0.2.28 |
| Ibm | Websphere Application Server | 6.0.2.29 |
| Ibm | Websphere Application Server | 6.0.2.30 |
| Ibm | Websphere Application Server | 6.0.2.31 |
| Ibm | Websphere Application Server | 6.0.2.32 |
| Ibm | Websphere Application Server | 6.0.2.33 |
| Ibm | Websphere Application Server | 6.0.2.35 |
| Ibm | Websphere Application Server | 6.0.2.37 |
| Ibm | Websphere Application Server | 6.0.2.39 |
Showing 50 of 97 affected configurations. See NVD for the full list.
References
- http://secunia.com/advisories/43965Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0833Vendor Advisory
- http://secunia.com/advisories/43965Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0833Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-1683?
IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors.
How severe is CVE-2011-1683?
Severity scoring for CVE-2011-1683 is pending analysis. The EPSS model estimates a 1.72% probability of exploitation in the next 30 days.
How do I fix CVE-2011-1683?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-1677mount in util-linux 2.19 and earlier does not remove the /et…
- CVE-2011-1678smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.c…
- CVE-2011-1679ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to appe…
- CVE-2011-1680ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc…
- CVE-2011-1681vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka…
- CVE-2011-1682Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2011-1684Heap-based buffer overflow in the MP4_ReadBox_skcr function …
- CVE-2011-1685Best Practical Solutions RT 3.8.0 through 3.8.9 and 4.0.0rc …
- CVE-2011-1686Multiple SQL injection vulnerabilities in Best Practical Sol…
- CVE-2011-1687Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 thro…
- CVE-2011-1688Directory traversal vulnerability in Best Practical Solution…
- CVE-2011-1689Multiple cross-site scripting (XSS) vulnerabilities in Best …
Are you affected by CVE-2011-1683?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST