CVE-2001-0446: Undefined Security Weakness

IBM WCS WebSphere Commerce Suite 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by appending a / to the requested URL...

CHINANSL Security Advisory(CSA-200107)

Topic: IBM WCS 4.0.1 + Application Server 3.0.2 for Solaris 2.7 show ".jsp" source Vulnerability. vulnerable: Solaris 2.7 + IBM WCS4.0,Application Server 3.0.2 discussion: follow URL insert "/" will be downloading ".jsp" source. exploits: http://target/index.jsp/ solution: to...

Дырка в IBM WCS

Пароли хранятся в открытом на чтение файле...

CHINANSL Security Advisory(CSA200013)

CHINANSL Security AdvisoryCSA200013 Topic: IBM WCS local user exceed his authority to access another file Release Dateёє Dec 25, 2000 Affected system: ============ IBM WCSWebsphere Commerce Suite ЎЎЎЎ+ Sun OS ЎЎЎЎ+ Sun Solaris ЎЎЎЎ+ Microsoft Windows NT ЎЎЎЎ+ Microsoft Windows 2000 ЎЎЎЎ+ HP HP-UX...