WebLogic source code disclosure

Summary
There is a bug in the Weblogic web application. Namely, by inserting a /ConsoleHelp/ into a URL, critical source code files may be viewed.
Solution
http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA02-03.jsp