CVEvulnerability
CVE-2005-4834
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive information, related to incorrect request processing by the web container.
Affected configurations
• ibm websphere application server 5.0.2.5
• ibm websphere application server 5.0.2.6
• ibm websphere application server 5.0.2.7
• ibm websphere application server 5.0.2.8
• ibm websphere application server 5.0.2.9
• ibm websphere application server 5.1.0
• ibm websphere application server 5.1.0.2
• ibm websphere application server 5.1.0.3
• ibm websphere application server 5.1.0.4
• ibm websphere application server 5.1.0.5
• ibm websphere application server 5.1.1
• ibm websphere application server 5.1.1.2
• ibm websphere application server 5.1.1.3
References
- http://secunia.com/advisories/24478 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21243541 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg24008814 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg24013840 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/22991 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0970 www.vupen.com
- http://secunia.com/advisories/24478 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21243541 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg24008814 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg24013840 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/22991 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0970 www.vupen.com