CVE-2009-0508
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 2.9%
The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in (1) web-inf, (2) meta-inf, and unspecified other directories via unknown vectors, related to (a) web-based applications and (b) the administrative console.
Productos afectados
n/a · n/aReferencias
http://secunia.com/advisories/34283http://secunia.com/advisories/34876https://exchange.xforce.ibmcloud.com/vulnerabilities/49085http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24022456http://www-01.ibm.com/support/docview.wss?uid=swg1PK81387http://www-01.ibm.com/support/docview.wss?uid=swg21380233http://www-01.ibm.com/support/docview.wss?uid=swg21380376http://www-01.ibm.com/support/docview.wss?uid=swg27006876http://www.securityfocus.com/bid/34104http://www.vupen.com/english/advisories/2009/0704http://www.vupen.com/english/advisories/2009/1188http://www.vupen.com/english/advisories/2009/1464