{"id":"CVE-2006-3231","state":"PUBLISHED","title":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other se","description":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via \"URIs with special characters.\"","publishedAt":"2006-06-27T10:00:00.000Z","updatedAt":"2024-08-07T18:23:20.995Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://secunia.com/advisories/20732","http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876","http://www.vupen.com/english/advisories/2007/0970","http://secunia.com/advisories/24478","http://www.vupen.com/english/advisories/2006/2482","http://www-1.ibm.com/support/docview.wss?uid=swg21243541","http://www.securityfocus.com/bid/18578","http://www.securityfocus.com/bid/22991"],"weaknesses":[],"ingestedAt":"2026-10-29T19:27:47.576Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2006/3xxx/CVE-2006-3231.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2006-3231","state":"PUBLISHED","datePublished":"2006-06-27T10:00:00.000Z","dateUpdated":"2024-08-07T18:23:20.995Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2006-06-26T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via \"URIs with special characters.\""}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://secunia.com/advisories/20732","name":"20732","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876","name":"PK22928","tags":["vendor-advisory","x_refsource_AIXAPAR"]},{"url":"http://www.vupen.com/english/advisories/2007/0970","name":"ADV-2007-0970","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://secunia.com/advisories/24478","name":"24478","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2006/2482","name":"ADV-2006-2482","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21243541","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/18578","name":"18578","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securityfocus.com/bid/22991","name":"22991","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2007-03-21T09:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2006-06-19T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-3231","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via \"URIs with special characters.\""}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20732","refsource":"SECUNIA","url":"http://secunia.com/advisories/20732"},{"name":"PK22928","refsource":"AIXAPAR","url":"http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876"},{"name":"ADV-2007-0970","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/0970"},{"name":"24478","refsource":"SECUNIA","url":"http://secunia.com/advisories/24478"},{"name":"ADV-2006-2482","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/2482"},{"name":"http://www-1.ibm.com/support/docview.wss?uid=swg21243541","refsource":"CONFIRM","url":"http://www-1.ibm.com/support/docview.wss?uid=swg21243541"},{"name":"18578","refsource":"BID","url":"http://www.securityfocus.com/bid/18578"},{"name":"22991","refsource":"BID","url":"http://www.securityfocus.com/bid/22991"},{"name":"http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876","refsource":"CONFIRM","url":"http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://secunia.com/advisories/20732","name":"20732","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876","name":"PK22928","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/0970","name":"ADV-2007-0970","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://secunia.com/advisories/24478","name":"24478","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/2482","name":"ADV-2006-2482","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21243541","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/18578","name":"18578","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/bid/22991","name":"22991","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T18:23:20.995Z"}}]}}}