Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Tomcat 安全漏洞
Vulnerability Description
Apache Tomcat是美国阿帕奇（Apache）基金会的一款轻量级Web应用服务器。该程序实现了对Servlet和JavaServer Page（JSP）的支持。 Apache Tomcat 存在安全漏洞，该漏洞源于默认配置不限制/admin文本的访问权限，远程攻击者通过直接的调用管理servlets使得在根目录中添加一个文本从而读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A