Description

Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.

Remediation

References

CVE-2002-1394

Related Vulnerabilities

Artifactory Incorrect Default Permissions Vulnerability (CVE-2021-46270)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16685)

RubyGems Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-8325)

Apache Tomcat Improper Certificate Validation Vulnerability (CVE-2018-8034)

Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-37251)

Severity

High

Classification

CVE-2002-1394

Tags

Missing Update Known Vulnerabilities