Apache Tomcat WAR file directory traversal vulnerability

Description
  • This alert was generated using only banner information. It may be a false positive.

    Apache Tomcat is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows attackers to delete or overwrite arbitrary files within the context of the web-server.

    Affected Apache Tomcat version (5.5.0 - 5.5.28).
    Affected Apache Tomcat version (6.0.0 - 6.0.20).
Remediation
  • Upgrade Apache Tomcat to the latest version.
References