Lucene search
HistoryDec 31, 2001 - 5:00 a.m.
CVE-2001-1510
allaire jrun
cve-2001-1510
iis 4.0/5.0
iplanet
apache
jrun
nvd
security vulnerability
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.007 Low
EPSS
Percentile
80.8%
Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) “%3f.jsp”, (2) “?.jsp” or (3) “?” to the requested URL.
| CPE | Name | Operator | Version |
|---|---|---|---|
| macromedia:jrun | macromedia jrun | eq | 3.1 |
| macromedia:jrun | macromedia jrun | eq | 2.3.3 |
| macromedia:jrun | macromedia jrun | eq | 3.0 |
Related
cvelist
cvelist
CVE-2001-1510
2022-10-03 16:22:34
openvas
openvas
Allaire JRun directory browsing vulnerability
2005-11-03 00:00:00
nessus
nessus
Allaire JRun Encoded JSP Request Directory Listing
2016-02-16 00:00:00
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.007 Low
EPSS
Percentile
80.8%
Related for CVE-2001-1510