IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could browse the file system. IBM X-Force ID: 134933.
| Software | From | Fixed in |
|---|---|---|
| ibm / websphere_application_server | 9.0 | 9.0.x |
| ibm / websphere_application_server | 7.0 | 7.0.x |
| ibm / websphere_application_server | 8.0 | 8.0.x |
| ibm / websphere_application_server | 8.5 | 8.5.x |