:IBM has acknowledged a vulnerability in WebSphere Application Server Community Edition, which can be exploited by malicious users to disclose potentially sensitive information.For more information:SA27398Successful exploitation requires a configured write-enabled Webdav servlet.The vulnerability is reported in all versions of WebSphere Application Server Community Edition.Solution:The vendor recommends reconfiguring or extending the Webdav servlet. See the vendor’s advisory for details.Original Advisory:http://www-1.ibm.com/support/docview.wss?uid=swg21286112Other References:SA27398:http://secunia.com/advisories/27398/

Original post by nitish