PT-2005-1487 · Ibm · Ibm Websphere Application Server

Publicado 2005-02-15 · Atualizado 2008-09-05 · CVE-2005-0425

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Websphere Application Server versions 5.0 through 6.0

Description A remote issue allows attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine.

Recommendations For IBM Websphere Application Server versions 5.0 through 6.0, consider restricting access to the JSP engine to minimize the risk of exploitation until a fix is available.

Correção

Identificadores relacionados

CVE-2005-0425

Produtos afetados

Ibm Websphere Application Server

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-0425 · Nota de Segurança
• http://www-1.ibm.com/support/docview.wss?uid=swg24008815 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0425 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg24008814 · Aviso do Fabricante
• http://secunia.com/advisories/14274 · Aviso do Fabricante