CVE-2002-1148

The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server…

published September 1, 2004

CVSS
—
EPSS
19%
Percentile
97.2
In the wild
Unconfirmed
What it is

The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.18648 · 97.2th percentile
Published
2004-09-01T04:00Z
EPSS history
Timeline
  • 01 SEP 04:00Z
    The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server…
    cvelistv5