Description
BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP.
References
- 1015792 vdb-entry
- weblogic-server-default-servlet(25347) vdb-entry
- BEA06-120.00 vendor-advisory
- 19310 third-party-advisory
- ADV-2006-1021 vdb-entry
- 17166 vdb-entry