CVE-2005-0425

Опубликовано: 02 мая 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine.

Ссылки

http://secunia.com/advisories/14274
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg24008814
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg24008815
Patch
Vendor Advisory
http://secunia.com/advisories/14274
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg24008814
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg24008815
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 57%

0.00352

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-hxxg-433j-m5fg

github

почти 4 года назад