Description

The Snoop Servlet returns information about the HTTP request itself and sometimes. It could help an attacker to prepare more advanced attacks

Remediation

Remove the Snoop Servlet from production systems or restrict access to it.

References

Snoop Servlet

IBM WebSphere Application Server snoop servlet information disclosure

Related Vulnerabilities

WordPress Plugin Advanced XML Reader XML External Entity Information Disclosure (0.3.4)

WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.13)

WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Information Disclosure (2.1.3)

WordPress readme.html file

WordPress Plugin Advanced Custom Fields PRO Information Disclosure (6.0.2)

Severity

Low

Classification

CWE-200 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure