Security Advisory

CVE-2002-1859

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-06-28 04:00:00

Last updated 2024-09-17 01:50:45

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").

← Browse all CVEs View on cve.org ↗