CVSS: 5.0EPSS: 0%CPEs: 7EXPL: 0CVE-2006-4223
https://notcve.org/view.php?id=CVE-2006-4223
IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" (PK23475), which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place a JSP outside a WAR.file; (3) the First Failure Data Capture (ffdc) log file (PK24834); and (4) traces (PK25568), a different issue than CVE-2006-4137. IBM WebSphere Application Server anterior a 6.0.2.13 permiet a atacantes locales o remotos (dependiendo del contexto) obtener información sensible a través de vectores no especificados relacionados con (1) "exposición de código fuente JSTP" (PK23475), (2) el archivo de registro de la Captura de Datos del Primer Fallo (First Failure Data Capture)(ffdc)(PK24834), y (3) trazas (PK25568), un problema distinto de CVE-2006-4137. • http://secunia.com/advisories/21487 http://secunia.com/advisories/24478 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876#60213 http://www-1.ibm.com/support/docview.wss?uid=swg21243541 http://www-1.ibm.com/support/docview.wss?uid=swg24013827 http://www.securityfocus.com/bid/22991 http://www.vupen.com/english/advisories/2006/3281 http://www.vupen.com/english/advisories/2007/0970 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.0EPSS: 0%CPEs: 7EXPL: 0CVE-2006-4222
https://notcve.org/view.php?id=CVE-2006-4222
Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including (1) an "authority problem" in ThreadIdentitySupport as identified by PK25199, and "Potential security exposure" issues as identified by (2) PK22747, (3) PK24334, (4) PK25740, and (5) PK26123. Múltiples vulnerabilidades no especificadas en el servidor de aplicaciones IBM WebSphere Application Server anterior a 6.0.2.13 tienen vectores e impacto no especificados, incluyendo (1) un "problema de autoridad" en ThreadIdentitySupport como se ha identificado en PK25199, y "Potenciales problemas de exposición de seguridad" como identifican (2) PK22747, (3) PK24334, (4) PK25740, y (5) PK26123. • http://secunia.com/advisories/21487 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876#60213 http://www.vupen.com/english/advisories/2006/3281 •
CVSS: 7.5EPSS: 0%CPEs: 16EXPL: 0CVE-2006-4136
https://notcve.org/view.php?id=CVE-2006-4136
Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadIdentitySupport, and possibly others. Múltiples vulnerabilidades no especificadas en IBM WebSphere Application Server anterior a 6.1.0.1 tienen impacto no especificado y vectores de ataque relacionados con (1) "peticiones y respuestas SOAP", (2) mbean, (2) ThreadIdentitySupport, y posiblemente otros. • http://secunia.com/advisories/21440 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 http://www-1.ibm.com/support/search.wss?rs=0&q=PK24334&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=PK25199&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=PK26498&apar=only http://www.securityfocus.com/bid/19463 http://www.vupen.com/english/advisories/2006/3262 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.0EPSS: 0%CPEs: 16EXPL: 0CVE-2006-4137
https://notcve.org/view.php?id=CVE-2006-4137
IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1) the log file, (2) "script generated syntax on wsadmin command line," and (3) traces. IBM WebSphere Application Server anteior a 6.1.0.1 permite a atacantes obtener información sensible mediante vectores no especificados relacionados con (1) el archivo de registro (log), (2) "sintaxis generada por secuencia de comandos en la línea de comandos wsadmin", y (3) trazas. • http://secunia.com/advisories/21440 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 http://www-1.ibm.com/support/search.wss?rs=0&q=PK27547&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=PK27857&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=PK28408&apar=only http://www.securityfocus.com/bid/19463 http://www.vupen.com/english/advisories/2006/3262 •
CVSS: 4.3EPSS: 0%CPEs: 50EXPL: 0CVE-2006-3231
https://notcve.org/view.php?id=CVE-2006-3231
Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters." Una vulnerabilidad no especificada en IBM WebSphere Application Server (WAS) antes de v6.0.2.11, cuando fileServingEnabled esta puesto a TRUE, permite a atacantes remotos obtener el código fuente JSP y otra información sensible a través de una "URI con caracteres especiales." • http://secunia.com/advisories/20732 http://secunia.com/advisories/24478 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 http://www-1.ibm.com/support/docview.wss?uid=swg21243541 http://www.securityfocus.com/bid/18578 http://www.securityfocus.com/bid/22991 http://www.vupen.com/english/advisories/2006/2482 http://www.vupen.com/english/advisories/2007/0970 •