CVE-2009-0508

IBM WebSphere Application Server <7.0.0.3 - Info Disclosure

Title source: llm
STIX 2.1

Description

The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in (1) web-inf, (2) meta-inf, and unspecified other directories via unknown vectors, related to (a) web-based applications and (b) the administrative console.

References (12)

Core 12
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34876
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24022456
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34283
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21380233
Patch, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1188
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PK81387
Patch, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1464
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34104
Patch, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/0704
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49085
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21380376

Scores

EPSS 0.0291
EPSS Percentile 85.4%

Details

CWE
CWE-200
Status published
Products (34)
ibm/websphere_application_server 5.1.0
ibm/websphere_application_server 5.1.1.19
ibm/websphere_application_server 6.0.2
ibm/websphere_application_server 6.0.2.1
ibm/websphere_application_server 6.0.2.3
ibm/websphere_application_server 6.0.2.5
ibm/websphere_application_server 6.0.2.7
ibm/websphere_application_server 6.0.2.9
ibm/websphere_application_server 6.0.2.11
ibm/websphere_application_server 6.0.2.15
... and 24 more
Published Mar 16, 2009
Tracked Since Feb 18, 2026