CVEvulnerability
CVE-2006-3231
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Description
Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."
Affected configurations
• ibm websphere application server 2.0
• ibm websphere application server 3.0
• ibm websphere application server 3.0.2
• ibm websphere application server 3.0.2.1
• ibm websphere application server 3.0.2.2
• ibm websphere application server 3.0.2.3
• ibm websphere application server 3.0.2.4
• ibm websphere application server 3.5
• ibm websphere application server 3.5.1
• ibm websphere application server 3.5.2
• ibm websphere application server 3.5.3
• ibm websphere application server 4.0.3
• ibm websphere application server 4.0.4
• ibm websphere application server 5.0
• ibm websphere application server 5.0.1
• ibm websphere application server 5.0.2
• ibm websphere application server 5.0.2.1
• ibm websphere application server 5.0.2.2
• ibm websphere application server 5.0.2.3
• ibm websphere application server 5.0.2.4
• ibm websphere application server 5.0.2.5
• ibm websphere application server 5.0.2.6
• ibm websphere application server 5.0.2.7
• ibm websphere application server 5.0.2.8
• ibm websphere application server 5.0.2.9
• ibm websphere application server 5.0.2.10
• ibm websphere application server 5.0.2.11
• ibm websphere application server 5.0.2.12
• ibm websphere application server 5.0.2.13
• ibm websphere application server 5.0.2.14
• ibm websphere application server 5.0.2.15
• ibm websphere application server 5.0.2.16
• ibm websphere application server 5.1.0
• ibm websphere application server 5.1.0.2
• ibm websphere application server 5.1.0.4
• ibm websphere application server 5.1.0.5
• ibm websphere application server 5.1.1
• ibm websphere application server 5.1.1.1
• ibm websphere application server 5.1.1.2
• ibm websphere application server 5.1.1.3
• ibm websphere application server 5.1.1.4
• ibm websphere application server 5.1.1.5
• ibm websphere application server 5.1.1.6
• ibm websphere application server 5.1.1.7
• ibm websphere application server 5.1.1.8
• ibm websphere application server 5.1.1.9
• ibm websphere application server 5.1.1.10
• ibm websphere application server 6.0
• ibm websphere application server 6.0.2
• ibm websphere application server 6.0.2.9
References
- http://secunia.com/advisories/20732 Patch, Vendor Advisory
- http://secunia.com/advisories/24478 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg21243541 www-1.ibm.com
- http://www.securityfocus.com/bid/18578 www.securityfocus.com
- http://www.securityfocus.com/bid/22991 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2482 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/0970 Vendor Advisory
- http://secunia.com/advisories/20732 Patch, Vendor Advisory
- http://secunia.com/advisories/24478 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg21243541 www-1.ibm.com
- http://www.securityfocus.com/bid/18578 www.securityfocus.com
- http://www.securityfocus.com/bid/22991 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2482 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/0970 Vendor Advisory