CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
80.9%
The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in (1) web-inf, (2) meta-inf, and unspecified other directories via unknown vectors, related to (a) web-based applications and (b) the administrative console.
Vendor | Product | Version | CPE |
---|---|---|---|
ibm | websphere_application_server | 5.1.0 | cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:* |
ibm | websphere_application_server | 5.1.1.19 | cpe:2.3:a:ibm:websphere_application_server:5.1.1.19:*:*:*:*:*:*:* |
ibm | websphere_application_server | 6.0.2 | cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:* |
ibm | websphere_application_server | 6.0.2.1 | cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:* |
ibm | websphere_application_server | 6.0.2.3 | cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:* |
ibm | websphere_application_server | 6.0.2.5 | cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:* |
ibm | websphere_application_server | 6.0.2.7 | cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:* |
ibm | websphere_application_server | 6.0.2.9 | cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:* |
ibm | websphere_application_server | 6.0.2.11 | cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:* |
ibm | websphere_application_server | 6.0.2.15 | cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:* |
secunia.com/advisories/34283
secunia.com/advisories/34876
www-01.ibm.com/support/docview.wss?rs=180&uid=swg24022456
www-01.ibm.com/support/docview.wss?uid=swg1PK81387
www-01.ibm.com/support/docview.wss?uid=swg21380233
www-01.ibm.com/support/docview.wss?uid=swg21380376
www-01.ibm.com/support/docview.wss?uid=swg27006876
www.securityfocus.com/bid/34104
www.vupen.com/english/advisories/2009/0704
www.vupen.com/english/advisories/2009/1188
www.vupen.com/english/advisories/2009/1464
exchange.xforce.ibmcloud.com/vulnerabilities/49085