ID CVE-2006-1093
Summary Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9 allows remote attackers to obtain sensitive information via unknown attack vectors, which causes JSP source code to be revealed.
References
Vulnerable Configurations
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.7:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.7:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.8:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.8:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.9:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.9:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.10:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.10:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.11:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.11:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.12:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.12:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.13:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.13:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.14:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.0.2.14:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.1.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.1.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.1.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.1.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.1.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.1.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.8:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.1.1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.9:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_application_server:5.1.1.9:*:*:*:*:*:*:*
CVSS
Base: 6.4 (as of 08-03-2011 - 02:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:N
refmap via4
bid 16908
confirm http://www-1.ibm.com/support/docview.wss?uid=swg21231377
sectrack 1015716
vupen ADV-2006-0788
Last major update 08-03-2011 - 02:32
Published 09-03-2006 - 13:06
Last modified 08-03-2011 - 02:32
Back to Top