CVE-2000-0672

The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly…

published January 22, 2001

CVSS
—
EPSS
10%
Percentile
95.6
In the wild
Unconfirmed
What it is

The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10032 · 95.6th percentile
Published
2001-01-22T05:00Z
EPSS history
Timeline
  • 22 JAN 05:00Z
    The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly…
    cvelistv5