The web container in IBM WebSphere Application Server (WAS) before 6.0.2.21 and 6.1.x before 6.1.0.9 sends response data intended for a different request in certain circumstances after a closed connection error which might allow remote attackers to obtain sensitive information.