VULNERABILITY INTELLIGENCE
CVE-2010-0777
CVSS score2.6 LOW
EPSS probability1.88%
CISA KEVNot currently listed
Published2010-05-17
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:N/A:N
Description
The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle long filenames and consequently sends an incorrect file in some responses, which allows remote attackers to obtain sensitive information by reading the retrieved file.
Weakness classification
- CWE-20: Improper Input Validation