{ "schema_version": "1.4.0", "id": "GHSA-hfwj-43j6-7v2f", "modified": "2022-05-17T02:00:43Z", "published": "2022-05-17T02:00:43Z", "aliases": [ "CVE-2011-1377" ], "details": "The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server (WAS) 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1377" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72299" }, { "type": "WEB", "url": "http://secunia.com/advisories/46469" }, { "type": "WEB", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM43792" }, { "type": "WEB", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM50205" }, { "type": "WEB", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg27011716" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/50310" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2012-01-15T03:55:00Z" } }