IBM WebSphere Application Server (WAS) is prone to an information- disclosure vulnerability. Exploiting this issue may allow an attacker to access sensitive information that may aid in further attacks. This issue affects WAS 6.0, 6.1, and 7.0.

For IBM WebSphere Application Server 7.0: Apply the latest Fix Pack (7.0.0.11 or later). See References. For IBM WebSphere Application Server 6.1: Apply the latest Fix Pack (6.1.0.31 or later). See References. For IBM WebSphere Application Server 6.0: Apply the latest Fix Pack (6.0.2.43 or later). See References.

• http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg27007951
• http://www-306.ibm.com/software/websphere/#
• http://www.securityfocus.com/bid/40277
• http://xforce.iss.net/xforce/xfdb/58557

---

Updated on 2015-03-25