Description
IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier allows remote attackers to obtain JSP source code and other sensitive information via "a specific JSP URL."
References
- ADV-2007-0970 vdb-entry
- 24478 third-party-advisory
- PK20181 vendor-advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21243541
- 22991 vdb-entry