PT-2001-1622 · Sun · Javaserver Web Dev Kit

Publicado

2001-05-24

·

Atualizado

2016-10-18

·

CVE-2001-0404

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions JavaServer Web Dev Kit (JSWDK) version 1.0.1
Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. (dot dot) in an HTTP request to the WEB-INF directory.
Recommendations For JavaServer Web Dev Kit (JSWDK) version 1.0.1, consider restricting access to the WEB-INF directory to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2001-0404

Produtos afetados

Javaserver Web Dev Kit