Description
IBM WebSphere Application Server 6.0.2 before FixPack 3 allows remote attackers to bypass authentication for the Welcome Page via a request to the default context root.
References
- 17900 vdb-entry
- ADV-2006-1724 vdb-entry
- PK10057 vendor-advisory
- 25368 vdb-entry
- websphere-welcome-auth-bypass(26312) vdb-entry
- 20025 third-party-advisory