Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/18578 | |
http://secunia.com/advisories/20732 | Patch Vendor Advisory |
http://www-1.ibm.com/support/docview.wss?uid=swg21243541 | |
http://www.securityfocus.com/bid/22991 | |
http://secunia.com/advisories/24478 | Vendor Advisory |
http://www.vupen.com/english/advisories/2007/0970 | Vendor Advisory |
http://www.vupen.com/english/advisories/2006/2482 | Vendor Advisory |
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2006-06-27 03:05
Updated : 2019-10-09 15:50
NVD link : CVE-2006-3231
Mitre link : CVE-2006-3231
JSON object : View
CWE
Products Affected
ibm
- websphere_application_server