Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-5366

Опубликовано: 11 окт. 2007
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information (web root path) via unspecified vectors that trigger an error message, probably related to enabling the useCanonCaches Java Virtual Machine (JVM) option.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus_developer:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:plus:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.0:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.0:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.1:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.1:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.2:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.2:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.3:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:8.0.3:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:9.0:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:9.0:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:9.0a:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_application_server:9.0a:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_apworks:7.0:*:modelers_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_apworks:8.0:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_apworks:8.0:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_studio:8.01:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_studio:8.01:*:standard_j:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_studio:9.0:*:enterprise:*:*:*:*:*
cpe:2.3:a:fujitsu:interstage_studio:9.0:*:standard_j:*:*:*:*:*

EPSS

Процентиль: 42%
0.00205
Низкий

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

github
почти 4 года назад

The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information (web root path) via unspecified vectors that trigger an error message, probably related to enabling the useCanonCaches Java Virtual Machine (JVM) option.

EPSS

Процентиль: 42%
0.00205
Низкий

5 Medium

CVSS2

Дефекты

CWE-22