CVE-2001-1510

2005-07-1404:00:00

mitre

www.cve.org

allaire jrun

arbitrary file read

multiple web servers

AI Score

6.8

Confidence

Low

EPSS

0.012

Percentile

85.7%

JSON

Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) “%3f.jsp”, (2) “?.jsp” or (3) “?” to the requested URL.