CVE-2005-4834

IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive information, related to incorrect request processing by the web container.

• http://secunia.com/advisories/24478Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21243541Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24008814Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24013840Patch, Vendor Advisory
• http://www.securityfocus.com/bid/22991
• http://www.vupen.com/english/advisories/2007/0970
• http://secunia.com/advisories/24478Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21243541Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24008814Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24013840Patch, Vendor Advisory
• http://www.securityfocus.com/bid/22991
• http://www.vupen.com/english/advisories/2007/0970

Published

Dec 31, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4828Kolab Server 2.0.0 and 2.0.1 does not properly handle when a…
• CVE-2005-4829VirtueMart before 1.0.1 does not properly handle errors when…
• CVE-2005-4830CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 all…
• CVE-2005-4831viewcvs in ViewCVS 0.9.2 allows remote attackers to set the …
• CVE-2005-4832SQL injection vulnerability in the Oracle Database Server 10…
• CVE-2005-4833IBM WebSphere Application Server (WAS) 6.0 before 20050201, …
• CVE-2005-4835The ath_rate_sample function in the ath_rate/sample/sample.c…
• CVE-2005-4836The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.4…
• CVE-2005-4837snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x be…
• CVE-2005-4838Multiple cross-site scripting (XSS) vulnerabilities in the e…
• CVE-2005-4839PureTLS before 0.9b5 does not clear optional Extensions and …
• CVE-2005-4840The Outlook Express Address Book control, when using Interne…