CVE-2006-6637

2006-12-1920:00:00

mitre

www.cve.org

6.3 Medium

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.0%

JSON

The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via “specific requests.”

References

secunia.com/advisories/23414

secunia.com/advisories/24478

www-1.ibm.com/support/docview.wss?uid=swg21243541

www-1.ibm.com/support/docview.wss?uid=swg24015155

www-1.ibm.com/support/docview.wss?uid=swg27006876

www.securityfocus.com/bid/21636

www.securityfocus.com/bid/22991

www.vupen.com/english/advisories/2006/5050

www.vupen.com/english/advisories/2007/0970