Vulnerability in Hp Application Server

CVE-2002-1856

HP Application Server 8.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").

EPSS: 0.037 (88.6th percentile) — read the EPSS interpretation.

Affected products

Hp Application_server — versions 8.0
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)