CVE-2005-1112 | BDVDB-2026-9383 Detail

Description#

IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the JSP engine.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=111342594129109&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/20099
http://www.osvdb.org/15501
http://www.securityfocus.com/bid/13160
http://securitytracker.com/id?1013697
http://secunia.com/advisories/14962

Exploit#

No public exploit known

History#

Version 12005-04-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.