Vulnerability in Orionserver Orion Application Server
CVE-2002-1859
Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
EPSS: 0.025 (83.2th percentile) — read the EPSS interpretation.
Affected products
- Orionserver Orion_application_server — versions 1.5.3
- N/a — versions n/a
References
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (Patch, vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Not Applicable)