CVEvulnerability

CVE-2001-0446

5.0 MEDIUM Published 2001-06-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-06-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by appending a / to the requested URL.

Affected configurations

• ibm websphere commerce suite 4.0.1

Related

Referenced by CWE · observed example (3)

  • CWE-162 Improper Neutralization of Trailing Special Elements weakness
  • CWE-41 Improper Resolution of Path Equivalence weakness
  • CWE-49 Path Equivalence: 'filename/' (Trailing Slash) weakness

References