Secunia

Two vulnerabilities have been reported in WebSphere Application Server. One has an unknown impact, the other can be exploited by malicious people to cause a DoS (Denial of Service).

1) An unspecified error exists in "Servlet Engine/Web Container" when the "FileServing" feature is enabled. No further information is currently available.

NOTE: An issue in "Wsadmin", which may leave some previously encrypted properties unencrypted has also been reported.

2) A vulnerability in the "mod_proxy" module can be exploited by malicious people to cause a DoS.

For more information:
SA30621

Solution
Apply Fix Pack 19 (6.1.0.19).

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
IBM (PK64302, PK67579):
http://www-01.ibm.com/support/docview.wss?uid=swg27007951

ISS X-Force:
http://xforce.iss.net/xforce/xfdb/42987

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area