CVE-2011-1321

CVE-2011-1321 describes a privilege escalation vulnerability in IBM WebSphere Application Server versions 6.1.0.x prior to 6.1.0.37 and 7.x prior to 7.0.0.15. The flaw lies in the AuthCache purge implementation, which fails to properly remove users from the PlatformCredential cache. This oversight could allow remote authenticated users to gain elevated privileges by exploiting outdated group memberships from a RACF Object. The vulnerability has a CVSS score of 6.5 (Medium), indicating a network-based attack with low attack complexity requiring authentication, potentially leading to partial confidentiality, integrity, and availability impacts. Despite its potential, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and attention.