CVE-2005-4833

IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Document Root, allows remote attackers to obtain the JSP source code and other sensitive information via "a specific JSP URL," related to lack of normalization of the URL format.

• http://osvdb.org/34177
• http://secunia.com/advisories/24478Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21243541Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24008815Patch, Vendor Advisory
• http://www.securityfocus.com/bid/22991
• http://www.vupen.com/english/advisories/2007/0970
• http://osvdb.org/34177
• http://secunia.com/advisories/24478Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21243541Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24008815Patch, Vendor Advisory
• http://www.securityfocus.com/bid/22991
• http://www.vupen.com/english/advisories/2007/0970

Published

Dec 31, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4827Internet Explorer 6.0, and possibly other versions, allows r…
• CVE-2005-4828Kolab Server 2.0.0 and 2.0.1 does not properly handle when a…
• CVE-2005-4829VirtueMart before 1.0.1 does not properly handle errors when…
• CVE-2005-4830CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 all…
• CVE-2005-4831viewcvs in ViewCVS 0.9.2 allows remote attackers to set the …
• CVE-2005-4832SQL injection vulnerability in the Oracle Database Server 10…
• CVE-2005-4834IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1…
• CVE-2005-4835The ath_rate_sample function in the ath_rate/sample/sample.c…
• CVE-2005-4836The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.4…
• CVE-2005-4837snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x be…
• CVE-2005-4838Multiple cross-site scripting (XSS) vulnerabilities in the e…
• CVE-2005-4839PureTLS before 0.9b5 does not clear optional Extensions and …