Unscored CVE-2001-0446 EUVD-2001-0442GHSA-3hgh-j2c9-7c7j

IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by append…

Published May 24, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by appending a / to the requested URL.

References

20010328 CHINANSL Security Advisory(CSA-200107) mailing-list