CVE-2006-3231

IBM WebSphere Application Server <6.0.2.11 - Info Disclosure

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."

References (8)

Core 8
Core References
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20732
Various Sources vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0970
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24478
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2482
Various Sources x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg21243541
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/18578
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22991

Scores

EPSS 0.0212
EPSS Percentile 80.0%

Details

Status published
Products (50)
ibm/websphere_application_server 2.0
ibm/websphere_application_server 3.0
ibm/websphere_application_server 3.0.2
ibm/websphere_application_server 3.0.2.1
ibm/websphere_application_server 3.0.2.2
ibm/websphere_application_server 3.0.2.3
ibm/websphere_application_server 3.0.2.4
ibm/websphere_application_server 3.5
ibm/websphere_application_server 3.5.1
ibm/websphere_application_server 3.5.2
... and 40 more
Published Jun 27, 2006
Tracked Since Feb 18, 2026