VulnerabilityModified
CVE-2006-3231
Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."
MEDIUM 4.3EPSS 2.12%
Does this matter?
Lower severity and a low EPSS score (2.12%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
- EPSS
- 2.12% probability · 81th percentile
- CISA KEV
- Not listed
- Affected
- ibm/websphere application server
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/20732Patch, Vendor Advisory
- http://secunia.com/advisories/24478Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876
- http://www-1.ibm.com/support/docview.wss?uid=swg21243541
- http://www.securityfocus.com/bid/18578
- http://www.securityfocus.com/bid/22991
- http://www.vupen.com/english/advisories/2006/2482Vendor Advisory
- http://www.vupen.com/english/advisories/2007/0970Vendor Advisory
- http://secunia.com/advisories/20732Patch, Vendor Advisory
- http://secunia.com/advisories/24478Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876
- http://www-1.ibm.com/support/docview.wss?uid=swg21243541
- http://www.securityfocus.com/bid/18578
- http://www.securityfocus.com/bid/22991
- http://www.vupen.com/english/advisories/2006/2482Vendor Advisory
- http://www.vupen.com/english/advisories/2007/0970Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.