Description
Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet.
References
- jrun-read-sample-files(4774) vdb-entry
- ASB00-015 vendor-advisory
- 818 vdb-entry
- 1386 vdb-entry