A security issue has been reported in IBM WebSphere Application Server, which may disclose sensitive information to malicious people.

An error in the web container when handling closed connection errors may in certain cases corrupt a buffer resulting in data, which was part of a response to the request, being sent in response to a second request. This may disclose sensitive information.

The security issue is reported in versions 6.0 through 6.1.0.7 for Distributed, versions 6.0 through 6.0.2.17 and 6.0.2.19 for i5/OS, and versions 6.0 through 6.1.0.8 for z/OS.

Solution
Apply updates.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM:
http://www-1.ibm.com/support/docview.wss?uid=swg21266069
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24015854
http://www-1.ibm.com/support/docview.wss?uid=swg21261071

Deep Links
Links available to Secunia VIM customers