PT-2001-1408 · Allaire · Jrun

Published 2001-05-03 · Updated 2017-10-10 · CVE-2001-0179

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Allaire JRun version 3.0

Description: The issue allows remote attackers to list the contents of the WEB-INF directory and access the web.xml file within it by using a malformed URL that contains a ".".

Recommendations: For Allaire JRun version 3.0, consider restricting access to the WEB-INF directory to prevent unauthorized listing of its contents and access to sensitive files like web.xml until a patch is available.

Fix

Related Identifiers

CVE-2001-0179

Affected Products

Jrun

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-0179 · Security Note
• http://allaire.com/handlers/index.cfm?ID=19546&Method=Full · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6008 · Note