Summary
The host is running Java Application Server and is prone to information disclosure vulnerability.
Impact
Successful exploitation could allow remote unprivileged user to read Web Application configuration files in 'WEB-INF' and 'META-INF' directories.
Impact Level: Application
Solution
Apply the security updates.
http://sunsolve.sun.com/search/document.do?assetkey=1-66-245446-1
*****
NOTE: Please ignore this warning, if above mentioned patch is applied.
*****
Insight
A security vulnerability in Java Application server may expose sensitive directory contents i.e. 'WEB-INF' and 'META-INF' via malformed requests.
Affected
Java System Application Server version 8.1 and 8.2 on Linux and Windows.
References
Updated on 2017-03-28
Severity
Classification
-
CVE CVE-2009-0278 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related Vulnerabilities