Описание
The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information (web root path) via unspecified vectors that trigger an error message, probably related to enabling the useCanonCaches Java Virtual Machine (JVM) option.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus_developer:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:plus:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.0:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.0:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.1:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.1:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.2:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.2:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.3:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.3:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:9.0:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:9.0:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:9.0a:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:9.0a:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_apworks:7.0:*:modelers_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_apworks:8.0:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_apworks:8.0:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_studio:8.01:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_studio:8.01:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_studio:9.0:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_studio:9.0:*:standard_j:*:*:*:*:*
EPSS
Процентиль: 42%
0.00205
Низкий
5 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
почти 4 года назад
The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information (web root path) via unspecified vectors that trigger an error message, probably related to enabling the useCanonCaches Java Virtual Machine (JVM) option.
EPSS
Процентиль: 42%
0.00205
Низкий
5 Medium
CVSS2
Дефекты
CWE-22