Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Websphere_application_server | Ibm | 5.0 (including) | 5.0 (including) |
| Websphere_application_server | Ibm | 5.1.0 (including) | 5.1.0 (including) |
| Websphere_application_server | Ibm | 6.0 (including) | 6.0 (including) |