CVE-2006-4223

IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to…

published August 18, 2006

CVSS
—
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" (PK23475), which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place a JSP outside a WAR.file; (3) the First Failure Data Capture (ffdc) log file (PK24834); and (4) traces (PK25568), a different issue than CVE-2006-4137.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01387 · 72.0th percentile
Published
2006-08-18T19:55Z
EPSS history
Timeline
  • 18 AUG 19:55Z
    IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to…
    cvelistv5