CVE-2005-4833

IBM WebSphere Application Server (WAS) 6.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Document Root, allows remote attackers to obtain the JSP source code and other sensitive information via "a specific JSP URL," related to lack of normalization of the URL format.

References (6)

Core 6
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0970
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24478
Patch, Vendor Advisory x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg21243541
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/34177
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22991
Patch, Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg24008815

Scores

EPSS 0.0127
EPSS Percentile 66.8%

Details

Status published
Products (1)
ibm/websphere_application_server 6.0
Published Dec 31, 2005
Tracked Since Feb 18, 2026