Skip to content
OpenAdvisories
Unscored CVE-2006-6637 EUVD-2006-6620GHSA-qvq6-m484-rr45

The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnable…

Published Dec 19, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via "specific requests."

References