Description

Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.

Remediation

References

CVE-2001-0917

Related Vulnerabilities

Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-0205)

PHP Insufficient Verification of Data Authenticity Vulnerability (CVE-2024-5458)

Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2212)

Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2002-2272)

WordPress Plugin InfiniteWP Client Security Bypass (1.9.4.4)

Severity

Medium

Classification

CVE-2001-0917

Tags

Missing Update Known Vulnerabilities