CVE:CVE-2006-2466
CNNVD:CNNVD-200605-381
BEA WebLogic Server 8.1到SP4和7.0到SP6可以使远程攻击者获得发生编译错误时与"时序窗口"有关的特定环境期间的JSP页的源代码。 又称"JSP showcode 漏洞"。
solution:Upgrade bea weblogic_server to a higher version than 7.0:sp1,7.0:sp2,7.0:sp3,7.0:sp4,7.0:sp5,8.1,8.1:sp1,8.1:sp2,8.1:sp3,and avoid the version 7.0:sp1,7.0:sp2,7.0:sp3,7.0:sp4,7.0:sp5,8.1,8.1:sp1,8.1:sp2,8.1:sp3