CVE-2006-6637: Infoleak
The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via "specific requests."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What are the risks associated with CVE-2006-6637?
CVE-2006-6637 allows remote attackers to access JSP source code and sensitive information, posing significant security risks to affected applications.
How can organizations mitigate CVE-2006-6637?
Organizations can mitigate CVE-2006-6637 by disabling servlet caching and ensuring that file serving is not enabled in the ibm-web-ext.xmi configuration.
Which versions of IBM WebSphere Application Server are vulnerable to CVE-2006-6637?
IBM WebSphere Application Server versions 6.0.2.1, 6.0.2.3, 6.0.2.5, 6.0.2.7, 6.0.2.9, 6.0.2.11, 6.0.2.13, and 6.0.2.15 are all vulnerable to CVE-2006-6637.
What actions should be taken if CVE-2006-6637 is detected in an environment?
If CVE-2006-6637 is detected, it is crucial to immediately disable vulnerable configurations and apply appropriate patches or updates.
Is CVE-2006-6637 commonly exploited in the wild?
While CVE-2006-6637 is a known vulnerability, its active exploitation may vary, so monitoring and patching are advised to prevent potential attacks.