Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Tomcat Web.XML远程文件内容泄露漏洞
Vulnerability Description
Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。 Apache Tomcat JDK 1.3.1及其以前版本的软件实现上存在漏洞,远程攻击者可能利用此漏洞获取服务器上部分文件的内容。 如果能在Apache Tomcat服务器上创建一个名为'web.xml'的文件,远程攻击者可能通过它读取其他文件的部分内容。任何可被读取为XML文档一部份的文件,可被此漏洞利用来获取部分文件内容,造成信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A