Description
Apache Axis2 installation includes a JSP page accessible at axis2-web/HappyAxis.jsp that discloses a lot of sensitive information. An attacker could use this information to conduct further attacks.
Remediation
If you don't want this information to be publicly accessible you need to restrict access to the /axis2-web/ directory.
References
Related Vulnerabilities
Reachable SharePoint interface
TCExam Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3806)
PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-7486)
Apache stronghold-info enabled
WordPress Plugin SKU Shortlink For WooCommerce Arbitrary File Disclosure (1.3.4)