CVEvulnerability
CVE-2005-4833
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Description
IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Document Root, allows remote attackers to obtain the JSP source code and other sensitive information via "a specific JSP URL," related to lack of normalization of the URL format.
Affected configurations
• ibm websphere application server 6.0
References
- http://osvdb.org/34177 osvdb.org
- http://secunia.com/advisories/24478 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21243541 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg24008815 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/22991 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0970 www.vupen.com
- http://osvdb.org/34177 osvdb.org
- http://secunia.com/advisories/24478 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21243541 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg24008815 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/22991 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0970 www.vupen.com