Summary
Requesting the URI /caucho-status gives information about the currently running Resin java servlet container.
Solution
If you don't use this feature, set the content of the '<caucho-status>' element to 'false' in the resin.conf file.
Severity
Classification
-
CVSS Base Score: 7.8
AV:N/AC:L/Au:N/C:N/I:N/A:C
Related Vulnerabilities
- Adobe Acrobat Multiple Vulnerabilities-01 Sep14 (Windows)
- Adobe Acrobat and Reader PDF Handling Multiple Vulnerabilities (Windows)
- Adobe AIR Code Execution and DoS Vulnerabilities Nov13 (Windows)
- Adobe Air Multiple Vulnerabilities June-2012 (Windows)
- Adobe Air Multiple Vulnerabilities June-2012 (Mac OS X)