CVE-2010-0777

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-05-17 · updated 2026-06-16
Weakness: CWE-20

Description

The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle long filenames and consequently sends an incorrect file in some responses, which allows remote attackers to obtain sensitive information by reading the retrieved file.

Affected products

IBM WebSphere Application Server: 6.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.0.1, 6.0.1.1 (+70)

References

http://secunia.com/advisories/39838
http://www-01.ibm.com/support/docview.wss?uid=swg1PM06111
http://www-01.ibm.com/support/docview.wss?uid=swg27007951
http://www.securityfocus.com/bid/40277
http://www.vupen.com/english/advisories/2010/1200
https://exchange.xforce.ibmcloud.com/vulnerabilities/58557
http://secunia.com/advisories/39838
http://www-01.ibm.com/support/docview.wss?uid=swg1PM06111
http://www-01.ibm.com/support/docview.wss?uid=swg27007951
http://www.securityfocus.com/bid/40277
http://www.vupen.com/english/advisories/2010/1200
https://exchange.xforce.ibmcloud.com/vulnerabilities/58557

Get alerted when CVE-2010-0777 or the next vulnerability affects your stack