Description

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.

Remediation

References

CVE-2003-0043

Related Vulnerabilities

Atlassian Jira Deserialization of Untrusted Data Vulnerability (CVE-2017-5983)

Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-2817)

Jenkins Use of Insufficiently Random Values Vulnerability (CVE-2020-2099)

Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2007-6514)

jQuery UI Autocomplete Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41182)

Severity

Medium

Classification

CVE-2003-0043

Tags

Missing Update Known Vulnerabilities