| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | = 5.0.1= 5.0.2= 5.0.2.1= 5.0.2.10= 5.0.2.11= 5.0.2.12= 5.0.2.13= 5.0.2.14= 5.0.2.15= 5.0.2.16= 5.0.2.2= 5.0.2.3= 5.0.2.4= 5.0.2.5= 5.0.2.6= 5.0.2.7= 5.0.2.8= 5.0.2.9 |
SimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX does not block certain invalid URIs and does not issue a security challenge, which allows remote attackers to read secure files and obtain sensitive information via certain requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free