NVD

Id
47840  
Name
CVE-2009-0508  
Description
The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in (1) web-inf, (2) meta-inf, and unspecified other directories via unknown vectors, related to (a) web-based applications and (b) the administrative console.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-03-16  
Modified Date
2009-06-05  
Seq
2009-0508  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
239627 47840 CVE-2009-0508 http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24022456  View
239628 47840 CVE-2009-0508 http://www-01.ibm.com/support/docview.wss?uid=swg21380233  View
239629 47840 CVE-2009-0508 http://www-01.ibm.com/support/docview.wss?uid=swg21380376  View
239630 47840 CVE-2009-0508 http://www-01.ibm.com/support/docview.wss?uid=swg27006876  View
239631 47840 CVE-2009-0508 34104  View
239632 47840 CVE-2009-0508 ADV-2009-0704  View
239633 47840 CVE-2009-0508 ADV-2009-1188  View
239634 47840 CVE-2009-0508 ADV-2009-1464  View
239635 47840 CVE-2009-0508 websphere-web-app-information-disclosure(49085)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40138 JVNDB-2009-001144 IBM WebSphere Application Server における任意のファイルを読まれる脆弱性 IBM WebSphere Application Server (WAS) には、war モジュールに含まれる任意のファイルを読まれる脆弱性が存在します。 CVE-2009-0508 37939 CVE-2009-0508 47840 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001144.html 2009-03-16 2009-04-16 View