VULHUB ™

Due to an input validation error in IBM HTTP Server for the AS/400, it is possible for a remote attacker to make a specially web crafted web request which will display script source code. If a '/' is appended to the end of a request for an existing script, then this will cause the script's source code to be displayed. There is a potential that this issue may result in sensitive information being disclosed to attackers, depending on the contents of the script source code. *It has been reported that the source of this issue is due to WebSphere Application server 3.5.4. However this has not yet been confirmed by the vendor.

Due to an input validation error in IBM HTTP Server for the AS/400, it is possible for a remote attacker to make a specially web crafted web request which will display script source code. If a '/' is appended to the end of a request for an existing script, then this will cause the script's source code to be displayed. There is a potential that this issue may result in sensitive information being disclosed to attackers, depending on the contents of the script source code. *It has been reported that the source of this issue is due to WebSphere Application server 3.5.4. However this has not yet been confirmed by the vendor.