PT-2001-1408 · Allaire · Jrun

Publicado 2001-05-03 · Atualizado 2017-10-10 · CVE-2001-0179

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Allaire JRun version 3.0

Description: The issue allows remote attackers to list the contents of the WEB-INF directory and access the web.xml file within it by using a malformed URL that contains a ".".

Recommendations: For Allaire JRun version 3.0, consider restricting access to the WEB-INF directory to prevent unauthorized listing of its contents and access to sensitive files like web.xml until a patch is available.

Correção

Identificadores relacionados

CVE-2001-0179

Produtos afetados

Jrun

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-0179 · Nota de Segurança
• http://allaire.com/handlers/index.cfm?ID=19546&Method=Full · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6008 · Nota