Vulnerability 8967 - CERT Civis.Net

Vulnerability Name:

CCN-8967

Published:

2002-04-30

Updated:

2002-04-30

Summary:

BEA WebLogic Server could allow a remote attacker to view the source code of JavaServer Pages (JSP). A remote attacker could send a specially-crafted URL request for a JSP file appended with "%00x" or "+." to cause the Web server to return the source code of the requested file.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Consequences:

Obtain Information

References:

Source: CCN
Type: BugTraq Mailing List, Tue Apr 30 2002 - 06:02:10 CDT
KPMG-2002016: Bea Weblogic incorrect URL parsing issues

Source: CCN
Type: BID-4645
BEA Systems WebLogic Server and Express URL Parsing Source Code Disclosure Vulnerability

Source: XF
Type: UNKNOWN
weblogic-jsp-reveal-source(8967)

Source: CCN
Type: BEA Systems, Inc. Security Advisory (BEA02-03.03)
Patch available for Show Code Vulnerability

Vulnerable Configuration:

Configuration CCN 1:

cpe:/a:oracle:weblogic_server:6.0:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:6.1:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:5.1:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:4.5:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:4.5.1:*:*:*:*:*:*:*

OR cpe:/a:oracle:weblogic_server:4.5.2:*:*:*:*:*:*:*

Denotes that component is vulnerable

BACK