Improper input validation in IBM Websphere Application Server
CVE-2010-0777
The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle long filenames and consequently sends an incorrect file in some responses, which allows remote attackers to obtain sensitive information by reading the retrieved file.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.019 (77.3th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_application_server — versions 6.0.0.3, 6.0.2.30, 7.0.0.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)