Vulnerability in Ibm Websphere Application Server

CVE-2005-0425

Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine.

EPSS: 0.021 (79.7th percentile) — read the EPSS interpretation.

Affected products

Ibm Websphere_application_server — versions 5.0, 5.1.0, 6.0
N/a — versions n/a

References

cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)