Information disclosure in IBM Websphere Application Server

CVE-2011-1368

The JavaServer Faces (JSF) application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors.

Vulnerability class: Information Disclosure

EPSS: 0.019 (77.9th percentile) — read the EPSS interpretation.

Affected products

Ibm Websphere_application_server — versions 8.0.0.0
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)
cve@mitre.org (vdb-entry, x_refsource_XF)