CVE-2006-6637 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2006-6637
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-6637

Description: The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via "specific requests."

CVE Status: Candidate

References: SAID Secunia Advisory: SA23414 Secunia Advisory: SA24478 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg21243541 http://www-1.ibm.com/support/docview.wss?uid=swg27006876 BID 21636 22991 AIXAPAR http://www-1.ibm.com/support/docview.wss?uid=swg24015155

Return to the previous page.