CVE-2006-2466 - BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote attackers to obtain the source code of JSP pages during certain circumstances related to a "timing window" when a compilation error occurs, aka the "JSP showcode vulnerability."

Back Back to CVE browser

LOW

BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote attackers to obtain the source code of JSP pages during certain circumstances related to a "timing window" when a compilation error occurs, aka the "JSP showcode vulnerability."

Published May 19, 2006

2.6

LOW

CVSS 2.0

EPSS 1.22%

Description

BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote attackers to obtain the source code of JSP pages during certain circumstances related to a "timing window" when a compilation error occurs, aka the "JSP showcode vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://dev2dev.bea.com/pub/advisory/192
vendor-advisoryx_refsource_BEAPatchVendor Advisory
http://secunia.com/advisories/20130
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securitytracker.com/id?1016100
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2006/1828
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/26461
vdb-entryx_refsource_XF

Link	Providers	Tags
http://dev2dev.bea.com/pub/advisory/192		vendor-advisoryx_refsource_BEAPatchVendor Advisory
http://secunia.com/advisories/20130		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securitytracker.com/id?1016100		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2006/1828		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/26461		vdb-entryx_refsource_XF