CVE-2011-1320: IBM WebSphere Application Server

Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days.

The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when the Tivoli Integrated Portal / embedded WebSphere Application Server (TIP/eWAS) framework is used, does not properly delete AuthCache entries upon a logout, which might allow remote attackers to access the server by leveraging an unattended workstation.

Affected products

• IBM WebSphere Application Server: version 6.1.0 only; version 6.1.0.0 only; version 6.1.0.1 only; version 6.1.0.2 only; version 6.1.0.3 only; version 6.1.0.5 only; …

Published 2011-03-08. Last modified 2026-06-16.