PT-2005-1487 · Ibm · Ibm Websphere Application Server

Published 2005-02-15 · Updated 2008-09-05 · CVE-2005-0425

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Websphere Application Server versions 5.0 through 6.0

Description A remote issue allows attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine.

Recommendations For IBM Websphere Application Server versions 5.0 through 6.0, consider restricting access to the JSP engine to minimize the risk of exploitation until a fix is available.

Fix

Related Identifiers

CVE-2005-0425

Affected Products

Ibm Websphere Application Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-0425 · Security Note
• http://www-1.ibm.com/support/docview.wss?uid=swg24008815 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24008814 · Vendor Advisory
• http://secunia.com/advisories/14274 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0425 · Note