CVE-2003-0043

EPSS 2.26%
Published 07.02.2003 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Apache ≫ Tomcat Version3.0

Apache ≫ Tomcat Version3.1

Apache ≫ Tomcat Version3.1.1

Apache ≫ Tomcat Version3.2

Apache ≫ Tomcat Version3.2.1

Apache ≫ Tomcat Version3.2.3

Apache ≫ Tomcat Version3.2.4

Apache ≫ Tomcat Version3.3

Apache ≫ Tomcat Version3.3.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.26%	0.839

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/

Vendor Advisory

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt

Vendor Advisory

http://www.ciac.org/ciac/bulletins/n-060.shtml

http://www.debian.org/security/2003/dsa-246

http://www.securityfocus.com/advisories/5111

http://www.securityfocus.com/bid/6722

https://exchange.xforce.ibmcloud.com/vulnerabilities/11195

https://nvd.nist.gov/vuln/detail/CVE-2003-0043

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2003-0043

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2003-0043

EUVD