PT-2000-1435 · Ibm · Ibm Websphere Server

Published 2000-06-08 · Updated 2024-01-26 · CVE-2000-0497

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere server version 3.0.2

Description The issue allows a remote attacker to view the source code of a JSP program. This can be achieved by requesting a URL that provides the JSP extension in upper case.

Recommendations For IBM WebSphere server version 3.0.2, consider restricting access to JSP files or modifying the server configuration to handle JSP extensions in a case-insensitive manner until a fix is available.

Fix

Weakness Enumeration

CWE-178

Related Identifiers

CVE-2000-0497

Affected Products

Ibm Websphere Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2000-0497 · Security Note
• http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0263.html · Vendor Advisory
• http://securityfocus.com/bid/1328 · Note
• https://t.me/cvenotify/68901 · Telegram Post
• http://www-4.ibm.com/software/webservers/appserv/efix.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0497 · Note