HTTP: Tomcat XPL File Disclosure
This signature detects attempts to exploit a known vulnerability against Tomcat. A successful attack can lead to arbitrary file disclosure.
Extended Description
Apache Tomcat is prone to a remote information-disclosure vulnerability Remote attackers can exploit this issue to obtain the contents of sensitive files stored on the server.
Affected Products
Apache_software_foundation tomcat
Short Name
HTTP:TOMCAT:XPL-FILE-DISC
Severity
Minor
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
CVE-2007-5461 Disclosure File Tomcat XPL bid:26070
Release Date
03/19/2008
Supported Platforms
mx-19.3
vmx-19.3
vsrx-19.2
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vmx-19.4
mx-19.4
srxevo-25.4
vsrx-26.2
srx-26.2
srx-branch-26.2
vsrx3bsd-26.2
mx-12.3
srx-12.3
srx-branch-12.3
vsrx-12.3
Sigpack Version
3339
False Positive
Unknown
Vendors
Apache_software_foundation
Red_hat
Suse
Apple
Gentoo
Sun
Avaya
Wikid_systems
Pardus
Mandriva
Debian
Vmware
Ibm
CVSS Score
3.5