CVE-2002-2007

The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web…

published July 14, 2005

CVSS

—

EPSS

41%

Percentile

98.7

In the wild

Unconfirmed

What it is

The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.41399 · 98.7th percentile
Published: 2005-07-14T04:00Z

EPSS history

Timeline

14 JUL 04:00Z
The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web…
cvelistv5