PT-2001-1622 · Sun · Javaserver Web Dev Kit
Published
2001-05-24
·
Updated
2016-10-18
·
CVE-2001-0404
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
JavaServer Web Dev Kit (JSWDK) version 1.0.1
Description
A directory traversal issue allows remote attackers to read arbitrary files by including a .. (dot dot) in an HTTP request to the WEB-INF directory.
Recommendations
For JavaServer Web Dev Kit (JSWDK) version 1.0.1, consider restricting access to the WEB-INF directory to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Javaserver Web Dev Kit