Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine.
| Software | From | Fixed in |
|---|---|---|
| ibm / websphere_application_server | 5.0 | 5.0.x |
| ibm / websphere_application_server | 5.1.0 | 5.1.0.x |
| ibm / websphere_application_server | 6.0 | 6.0.x |