Vulnerabilities > IBM > Websphere Application Server > 6.0.2.21

DATE CVE VULNERABILITY TITLE RISK
2009-03-16 CVE-2009-0508 Information Exposure vulnerability in IBM Websphere Application Server
The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in (1) web-inf, (2) meta-inf, and unspecified other directories via unknown vectors, related to (a) web-based applications and (b) the administrative console.
network
low complexity
ibm CWE-200
7.5