CVE-2010-0777 | BDVDB-2026-41751 Detail

Description#

The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle long filenames and consequently sends an incorrect file in some responses, which allows remote attackers to obtain sensitive information by reading the retrieved file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg27007951
https://exchange.xforce.ibmcloud.com/vulnerabilities/58557
http://secunia.com/advisories/39838
http://www.securityfocus.com/bid/40277
http://www-01.ibm.com/support/docview.wss?uid=swg1PM06111
http://www.vupen.com/english/advisories/2010/1200

Exploit#

No public exploit known

History#

Version 12010-05-17Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.