Vulnerabilities > CVE-2006-3231 - Multiple vulnerability in IBM Websphere Application Server Prior to 6.0.2.11

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

ibm

NVD

Published: 2006-06-27

Updated: 2019-10-09

Summary

Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Websphere Application Server 2.0 IBM Websphere Application Server 3.0 IBM Websphere Application Server 3.0.2 IBM Websphere Application Server 3.0.2.1 IBM Websphere Application Server 3.0.2.2 IBM Websphere Application Server 3.0.2.3 IBM Websphere Application Server 3.0.2.4 IBM Websphere Application Server 3.5 IBM Websphere Application Server 3.5.1 IBM Websphere Application Server 3.5.2 IBM Websphere Application Server 3.5.3 IBM Websphere Application Server 4.0.3 IBM Websphere Application Server 4.0.4 IBM Websphere Application Server 5.0 IBM Websphere Application Server 5.0.1 IBM Websphere Application Server 5.0.2 IBM Websphere Application Server 5.0.2.1 IBM Websphere Application Server 5.0.2.2 IBM Websphere Application Server 5.0.2.3 IBM Websphere Application Server 5.0.2.4 IBM Websphere Application Server 5.0.2.5 IBM Websphere Application Server 5.0.2.6 IBM Websphere Application Server 5.0.2.7 IBM Websphere Application Server 5.0.2.8 IBM Websphere Application Server 5.0.2.9 IBM Websphere Application Server 5.0.2.10 IBM Websphere Application Server 5.0.2.11 IBM Websphere Application Server 5.0.2.12 IBM Websphere Application Server 5.0.2.13 IBM Websphere Application Server 5.0.2.14 IBM Websphere Application Server 5.0.2.15 IBM Websphere Application Server 5.0.2.16 IBM Websphere Application Server 5.1.0 IBM Websphere Application Server 5.1.0.2 IBM Websphere Application Server 5.1.0.4 IBM Websphere Application Server 5.1.0.5 IBM Websphere Application Server 5.1.1 IBM Websphere Application Server 5.1.1.1 IBM Websphere Application Server 5.1.1.2 IBM Websphere Application Server 5.1.1.3 IBM Websphere Application Server 5.1.1.4 IBM Websphere Application Server 5.1.1.5 IBM Websphere Application Server 5.1.1.6 IBM Websphere Application Server 5.1.1.7 IBM Websphere Application Server 5.1.1.8 IBM Websphere Application Server 5.1.1.9 IBM Websphere Application Server 5.1.1.10 IBM Websphere Application Server 6.0 IBM Websphere Application Server 6.0.2 IBM Websphere Application Server 6.0.2.9	50

Summary

Vulnerable Configurations

References