Lucene search

[email protected]CVE-2006-7166

HistoryMar 20, 2007 - 10:19 a.m.

CVE-2006-7166

2007-03-2010:19:00

[email protected]

web.nvd.nist.gov

ibm

websphere

application server

security

vulnerability

cve-2006-7166

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%

JSON

IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier allows remote attackers to obtain JSP source code and other sensitive information via “a specific JSP URL.”

Affected configurations

NVD

Node

ibmwebsphere_application_serverMatch5.0

ibmwebsphere_application_serverMatch5.0.1

ibmwebsphere_application_serverMatch5.0.2

ibmwebsphere_application_serverMatch5.0.2.1

ibmwebsphere_application_serverMatch5.0.2.2

ibmwebsphere_application_serverMatch5.0.2.3

ibmwebsphere_application_serverMatch5.0.2.4

ibmwebsphere_application_serverMatch5.0.2.5

ibmwebsphere_application_serverMatch5.0.2.6

ibmwebsphere_application_serverMatch5.0.2.7

ibmwebsphere_application_serverMatch5.0.2.8

ibmwebsphere_application_serverMatch5.0.2.9

ibmwebsphere_application_serverMatch5.0.2.10

ibmwebsphere_application_serverMatch5.0.2.11

ibmwebsphere_application_serverMatch5.0.2.12

ibmwebsphere_application_serverMatch5.0.2.13

ibmwebsphere_application_serverMatch5.0.2.14

ibmwebsphere_application_serverMatch5.0.2.15

ibmwebsphere_application_serverMatch5.0.2.16

ibmwebsphere_application_serverMatch5.1.0

ibmwebsphere_application_serverMatch5.1.0.2

ibmwebsphere_application_serverMatch5.1.0.3

ibmwebsphere_application_serverMatch5.1.0.4

ibmwebsphere_application_serverMatch5.1.0.5

ibmwebsphere_application_serverMatch5.1.1

ibmwebsphere_application_serverMatch5.1.1.1

ibmwebsphere_application_serverMatch5.1.1.2

ibmwebsphere_application_serverMatch5.1.1.3

ibmwebsphere_application_serverMatch5.1.1.4

ibmwebsphere_application_serverMatch5.1.1.5

ibmwebsphere_application_serverMatch5.1.1.6

ibmwebsphere_application_serverMatch5.1.1.7

ibmwebsphere_application_serverMatch5.1.1.8

ibmwebsphere_application_serverMatch5.1.1.9

CPENameOperatorVersion
ibm:websphere_application_serveribm websphere application servereq5.0
ibm:websphere_application_serveribm websphere application servereq5.0.1
ibm:websphere_application_serveribm websphere application servereq5.0.2
ibm:websphere_application_serveribm websphere application servereq5.0.2.1
ibm:websphere_application_serveribm websphere application servereq5.0.2.2
ibm:websphere_application_serveribm websphere application servereq5.0.2.3
ibm:websphere_application_serveribm websphere application servereq5.0.2.4
ibm:websphere_application_serveribm websphere application servereq5.0.2.5
ibm:websphere_application_serveribm websphere application servereq5.0.2.6
ibm:websphere_application_serveribm websphere application servereq5.0.2.7

CPE	Name	Operator	Version
ibm:websphere_application_server	ibm websphere application server	eq	5.0
ibm:websphere_application_server	ibm websphere application server	eq	5.0.1
ibm:websphere_application_server	ibm websphere application server	eq	5.0.2
ibm:websphere_application_server	ibm websphere application server	eq	5.0.2.1
ibm:websphere_application_server	ibm websphere application server	eq	5.0.2.2
ibm:websphere_application_server	ibm websphere application server	eq	5.0.2.3
ibm:websphere_application_server	ibm websphere application server	eq	5.0.2.4
ibm:websphere_application_server	ibm websphere application server	eq	5.0.2.5
ibm:websphere_application_server	ibm websphere application server	eq	5.0.2.6
ibm:websphere_application_server	ibm websphere application server	eq	5.0.2.7

Rows per page:

1-10 of 341

References

secunia.com/advisories/24478

www-1.ibm.com/support/docview.wss?uid=swg21243541

www-1.ibm.com/support/docview.wss?uid=swg24011720

www.securityfocus.com/bid/22991

www.vupen.com/english/advisories/2007/0970

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%

JSON

Related for CVE-2006-7166

cvelist1 nvd1