| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | = 6.0= 6.0.0.1= 6.0.0.2= 6.0.0.3= 6.0.1= 6.0.1.1= 6.0.1.11= 6.0.1.13= 6.0.1.15= 6.0.1.17= 6.0.1.2= 6.0.1.3= 6.0.1.5= 6.0.1.7= 6.0.1.9= 6.0.2= 6.0.2.1= 6.0.2.10= 6.0.2.11= 6.0.2.12= 6.0.2.13= 6.0.2.14= 6.0.2.15= 6.0.2.16= 6.0.2.17= 6.0.2.18= 6.0.2.19= 6.0.2.2= 6.0.2.20= 6.0.2.21= 6.0.2.22= 6.0.2.23= 6.0.2.24= 6.0.2.25= 6.0.2.27= 6.0.2.28= 6.0.2.29= 6.0.2.3= 6.0.2.30= 6.0.2.31= 6.0.2.32= 6.0.2.33= 6.0.2.35= 6.0.2.37= 6.0.2.39= 6.0.2.4= 6.0.2.5= 6.0.2.6= 6.0.2.7= 6.0.2.8= 6.0.2.9= 6.1= 6.1.0= 6.1.0.0= 6.1.0.1= 6.1.0.11= 6.1.0.13= 6.1.0.15= 6.1.0.17= 6.1.0.19= 6.1.0.2= 6.1.0.21= 6.1.0.23= 6.1.0.25= 6.1.0.27= 6.1.0.29= 6.1.0.3= 6.1.0.5= 6.1.0.7= 6.1.0.9= 7.0= 7.0.0.1= 7.0.0.3= 7.0.0.5= 7.0.0.7= 7.0.0.9 |
The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle long filenames and consequently sends an incorrect file in some responses, which allows remote attackers to obtain sensitive information by reading the retrieved file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free