Lucene search

K
cve[email protected]CVE-2006-3835
HistoryJul 25, 2006 - 1:22 p.m.

CVE-2006-3835

2006-07-2513:22:00
NVD-CWE-Other
web.nvd.nist.gov
67
2
cve-2006-3835
apache tomcat 5
directory listing
vulnerability

6.2 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.877 High

EPSS

Percentile

98.6%

Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.

References

Social References

More

6.2 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.877 High

EPSS

Percentile

98.6%