Description

The Snoop Servlet returns information about the HTTP request itself and sometimes. It could help an attacker to prepare more advanced attacks

Remediation

Remove the Snoop Servlet from production systems or restrict access to it.

References

Snoop Servlet

IBM WebSphere Application Server snoop servlet information disclosure

Related Vulnerabilities

Unprotected JSON file leaking secrets

Version Disclosure (ASP.NET MVC)

WordPress debug mode

Slideshow Information Disclosure (2.2.21)

PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5288)

Severity

Low

Classification

CWE-200 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Information Disclosure