Unscored CVE-2001-0179 EUVD-2001-0179GHSA-wcg7-9792-924w

Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a ma…

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a "."

References

jrun-webinf-file-retrieval(6008) vdb-entry
ASB01-02 vendor-advisory