CVE-2005-4834

IBM WebSphere Application Server <5.1.1.3 - Info Disclosure

Title source: llm
STIX 2.1

Description

IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive information, related to incorrect request processing by the web container.

References (6)

Core 6
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0970
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24478
Patch, Vendor Advisory x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg21243541
Patch, Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg24008814
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22991
Patch, Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg24013840

Scores

EPSS 0.0144
EPSS Percentile 70.5%

Details

Status published
Products (13)
ibm/websphere_application_server 5.0.2.5
ibm/websphere_application_server 5.0.2.6
ibm/websphere_application_server 5.0.2.7
ibm/websphere_application_server 5.0.2.8
ibm/websphere_application_server 5.0.2.9
ibm/websphere_application_server 5.1.0
ibm/websphere_application_server 5.1.0.2
ibm/websphere_application_server 5.1.0.3
ibm/websphere_application_server 5.1.0.4
ibm/websphere_application_server 5.1.0.5
... and 3 more
Published Dec 31, 2005
Tracked Since Feb 18, 2026