IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.13)could allow a remote attacker to obtain sensitive information caused by improper error handling by MyFaces in JSF.
https://exchange.xforce.ibmcloud.com/vulnerabilities/132342
http://www.securitytracker.com/id/1039695