CVE-2000-0672

Опубликовано: 20 июл. 2000

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2000-07/0309.html
Broken Link
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/1548
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/5160
Third Party Advisory
VDB Entry
http://archives.neohapsis.com/archives/bugtraq/2000-07/0309.html
Broken Link
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/1548
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/5160
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.03158

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-72m4-92vp-gxfj

github

около 3 лет назад