ID de Prueba:	1.3.6.1.4.1.25623.1.0.900301
Categoría:	Web application abuses
Título:	Sun Java System Application Server Information Disclosure vulnerability
Resumen:	Java Application Server is prone to an information disclosure vulnerability.
Descripción:	Summary: Java Application Server is prone to an information disclosure vulnerability. Vulnerability Insight: A security vulnerability in Java Application server may expose sensitive directory contents i.e. 'WEB-INF' and 'META-INF' via malformed requests. Vulnerability Impact: Successful exploitation could allow remote unprivileged user to read Web Application configuration files in 'WEB-INF' and 'META-INF' directories. Affected Software/OS: Java System Application Server version 8.1 and 8.2 on Linux and Windows. Solution: Apply the security updates. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0278 BugTraq ID: 33397 http://www.securityfocus.com/bid/33397 http://osvdb.org/51604 http://secunia.com/advisories/33725 http://sunsolve.sun.com/search/document.do?assetkey=1-66-245446-1 http://www.vupen.com/english/advisories/2009/0208 XForce ISS Database: javasystem-webinf-metainf-info-disclosure(48161) https://exchange.xforce.ibmcloud.com/vulnerabilities/48161
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.