The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker.