CVE-2008-0740

IBM WebSphere Application Server (WAS) versions affected: 6.0.x before Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15). The vulnerability involves writing unspecified cleartext information to http_plugin.log, which could enable local users to read and obtain sensitive data. There is ...

CVE-2007-4833

Technical details about CVE-2007-4833 are not publicly available in the provided documents; no affected products, vulnerable component specifics, or remediation information are disclosed here. Monitor for updates.

CVE-2005-4833

The affected product is IBM WebSphere Application Server 6.0 prior to 20050201, vulnerable when serving pages in an Application WAR or an Extended Document Root. The root cause is lack of URL normalization, allowing remote attackers to access the JSP source code and other sensitive information vi...

CVE-2005-3633

The CVE-2005-3633 entry describes an HTTP response splitting vulnerability in SAP Web Application Server (WAS) 6.10 through 7.00. The issue affects frameset.htm, allowing remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter. The vulnerability’s root cause is improper ha...

[Full-disclosure] CYBSEC - Security Advisory: HTTP Response Splitting in SAP WAS

The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSECSecurityAdvisoryHTTPResponseSplittinginSAPWAS.pdf CYBSEC S.A. www.cybsec.com Advisory Name: HTTP Response Splitting in SAP WAS Web Application Server Vulnerability Class: HTTP Response Splitti...

[Full-disclosure] CYBSEC - Security Advisory: Phishing Vector in SAP WAS

The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSECSecurityAdvisoryPhishingVectorinSAPWAS.pdf CYBSEC S.A. www.cybsec.com Advisory Name: Phishing Vector in SAP WAS Web Application Server Vulnerability Class: Phishing Vector / Improper Input...