Unscored CVE-2000-0498 EUVD-2000-0495GHSA-9cg4-m358-cc47

Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension …

Published Jan 22, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.

References

1328 vdb-entry
ewave-servletexec-jsp-source-read(4649) vdb-entry
20000608 Potential vulnerability in Unify eWave ServletExec mailing-list