CVE-2003-0043

EPSS 2.26%
Veröffentlicht 07.02.2003 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apache ≫ Tomcat Version3.0

Apache ≫ Tomcat Version3.1

Apache ≫ Tomcat Version3.1.1

Apache ≫ Tomcat Version3.2

Apache ≫ Tomcat Version3.2.1

Apache ≫ Tomcat Version3.2.3

Apache ≫ Tomcat Version3.2.4

Apache ≫ Tomcat Version3.3

Apache ≫ Tomcat Version3.3.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.26%	0.839

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/

Vendor Advisory

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt

Vendor Advisory

http://www.ciac.org/ciac/bulletins/n-060.shtml

http://www.debian.org/security/2003/dsa-246

http://www.securityfocus.com/advisories/5111

http://www.securityfocus.com/bid/6722

https://exchange.xforce.ibmcloud.com/vulnerabilities/11195

https://nvd.nist.gov/vuln/detail/CVE-2003-0043

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2003-0043

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2003-0043

EUVD