Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Apache Tomcat DefaultServlet File Disclosure Vulnerability

The servlet 'org.apache.catalina.servlets.DefaultServlet' is included with Apache Tomcat by default. It is possible to use this servlet to view contents of files within the webroot. This includes JSP source code, which may contain sensitive data such as database usernames and passwords.







 

Privacy Statement
Copyright 2008, SecurityFocus