Description
Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2) META-INF directory via a malformed request.
References
- 51604 vdb-entry
- ADV-2009-0208 vdb-entry
- javasystem-webinf-metainf-info-disclosure(48161) vdb-entry
- 33397 vdb-entry
- 33725 third-party-advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-119166-35-1
- 245446 vendor-advisory