The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker.
ibm websphere message broker 8.0