| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | = 6.0.2.1= 6.0.2.11= 6.0.2.13= 6.0.2.15= 6.0.2.3= 6.0.2.5= 6.0.2.7= 6.0.2.9 |
The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via "specific requests."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free