CVE-2006-6637

CVE-2006-6637 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via "specific requests."

Learn more about our Cis Benchmark Audit For Ibm I.