Skip to content
OpenAdvisories
Unscored CVE-2006-7164 EUVD-2006-7146GHSA-whmq-x848-rvj4

SimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX does not block certain invalid URIs and does …

Published Mar 20, 2007 · Updated Sep 16, 2024 · Assigned by mitre

Description

SimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX does not block certain invalid URIs and does not issue a security challenge, which allows remote attackers to read secure files and obtain sensitive information via certain requests.

References