← Database

CVE-2006-6637

MEDIUM CVSS: 5.0 Published: 2006-12-19 Modified: 2026-06-16

Description

The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via "specific requests."

Affected Platforms

Ibm Websphere Application Server

Weakness Type

CWE-200

References