CVE-2001-0312 Information disclosure in n/a
Remote attackers can read JSP source code by sending HTTP requests with host headers not in the WebSphere aliases list, bypassing processing.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2001-0312?
CVE-2001-0312 is a medium-severity vulnerability in n/a, published on 4 Apr 2001. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere processing.
Which versions are affected by CVE-2001-0312?
It affects 1 product.
Products include Ibm Websphere Plugin.
How do I fix CVE-2001-0312?
No fix has been published for CVE-2001-0312 yet. Limit exposure of the affected software until one is available.
Is CVE-2001-0312 being exploited?
There is no known exploitation of CVE-2001-0312 in the wild and no public exploit code.
Sources
Also known as GHSA-82pw-8qqc-cfm6.