IBM WebSphere Portal 8.0.0.1 before CF09 does not properly handle references in compute="always" Web Content Manager (WCM) navigator components, which allows remote attackers to obtain sensitive component information via unspecified vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/89278
http://www.securityfocus.com/bid/64488
http://www-01.ibm.com/support/docview.wss?uid=swg21660011