|
|
CVE Reference: CVE-2006-4223 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-4223 |
|
|
Description: IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" (PK23475), which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place a JSP outside a WAR.file; (3) the First Failure Data Capture (ffdc) log file (PK24834); and (4) traces (PK25568), a different issue than CVE-2006-4137. |
|
|
CVE Status: Candidate |
|
|
References: SAID Secunia Advisory: SA21487 Secunia Advisory: SA24478 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg21243541 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876#60213 BID 22991 AIXAPAR http://www-1.ibm.com/support/docview.wss?uid=swg24013827 |
|
| Return to the previous page. |
