The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle long filenames and consequently sends an incorrect file in some responses, which allows remote attackers to obtain sensitive information by reading the retrieved file.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle long filenames and consequently sends an incorrect file in some responses, which allows remote attackers to obtain sensitive information by reading the retrieved file.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg27007951 | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/58557 | vdb-entry x_refsource_XF |
| http://secunia.com/advisories/39838 | third-party-advisory x_refsource_SECUNIA |
| http://www.securityfocus.com/bid/40277 | vdb-entry x_refsource_BID |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PM06111 | vendor-advisory x_refsource_AIXAPAR |
| http://www.vupen.com/english/advisories/2010/1200 | vdb-entry x_refsource_VUPEN |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg27007951 | x_refsource_CONFIRM x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/58557 | vdb-entry x_refsource_XF x_transferred |
| http://secunia.com/advisories/39838 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.securityfocus.com/bid/40277 | vdb-entry x_refsource_BID x_transferred |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PM06111 | vendor-advisory x_refsource_AIXAPAR x_transferred |
| http://www.vupen.com/english/advisories/2010/1200 | vdb-entry x_refsource_VUPEN x_transferred |
The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle long filenames and consequently sends an incorrect file in some responses, which allows remote attackers to obtain sensitive information by reading the retrieved file.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 2.6 | LOW | AV:N/AC:H/Au:N/C:P/I:N/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| http://secunia.com/advisories/39838 | cve@mitre.org | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PM06111 | cve@mitre.org | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg27007951 | cve@mitre.org | N/A |
| http://www.securityfocus.com/bid/40277 | cve@mitre.org | N/A |
| http://www.vupen.com/english/advisories/2010/1200 | cve@mitre.org | N/A |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/58557 | cve@mitre.org | N/A |
| http://secunia.com/advisories/39838 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PM06111 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg27007951 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.securityfocus.com/bid/40277 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.vupen.com/english/advisories/2010/1200 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/58557 | af854a3a-2127-422b-91ae-364da2661108 | N/A |