CVE-2006-4223 in WebSphere Application Server

Sumário (Inglês)

IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" (PK23475), which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place a JSP outside a WAR.file; (3) the First Failure Data Capture (ffdc) log file (PK24834); and (4) traces (PK25568), a different issue than CVE-2006-4137.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

18/08/2006

Divulgação

18/08/2006

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
2606	IBM WebSphere Application Server Divulgação de Informação	200	Prova de conceito	Correção oficial	CVE-2006-4223
2605	IBM WebSphere Application Server WSN Authentication Divulgação de Informação	200	Prova de conceito	Correção oficial	CVE-2006-4223

Fontes

• MITRE
• NVD
• CVE Details