PT-2000-1435 · Ibm · Ibm Websphere Server

CVE-2000-0497 · Publicado 2000-06-08 · Atualizado 2024-01-26

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere server version 3.0.2

Description The issue allows a remote attacker to view the source code of a JSP program. This can be achieved by requesting a URL that provides the JSP extension in upper case.

Recommendations For IBM WebSphere server version 3.0.2, consider restricting access to JSP files or modifying the server configuration to handle JSP extensions in a case-insensitive manner until a fix is available.

Correção

Enumeração de Fraquezas

CWE-178

Identificadores relacionados

CVE-2000-0497

Produtos afetados

Ibm Websphere Server

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2000-0497 · Nota de Segurança
• http://securityfocus.com/bid/1328 · Nota
• https://t.me/cvenotify/68901 · Publicação no Telegram
• http://www-4.ibm.com/software/webservers/appserv/efix.html · Nota
• http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0263.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0497 · Nota