Description

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.

Remediation

References

CVE-2003-0043

Related Vulnerabilities

PHP-Fusion URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-23182)

MySQL Configuration Vulnerability (CVE-2012-5613)

Oracle Database Server SYS Account privilege issue (CVE-2021-2000)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-37391)

Ruby Double Free Vulnerability (CVE-2022-28738)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2003-0043