CVE:CVE-2006-6537
CNNVD:CNNVD-200612-268
IBM WebSphere Host On-Demand存在安全绕过漏洞。远程攻击者可以通过修改过的pnl参数来绕过认证，和hod/HODAdmin.html及hod/frameset.html有关。
solution:Upgrade ibm websphere_host_on-demand to a higher version than 6.0,7.0,8.0,9.0,and avoid the version 6.0,7.0,8.0,9.0