Description
Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."
References
- 20732 third-party-advisory
- PK22928 vendor-advisory
- ADV-2007-0970 vdb-entry
- 24478 third-party-advisory
- ADV-2006-2482 vdb-entry
- http://www-1.ibm.com/support/docview.wss?uid=swg21243541
- 18578 vdb-entry
- 22991 vdb-entry