CVE-2002-1860

2005-06-2804:00:00

mitre

www.cve.org

cve-2002-1860

remote attackers

file retrieval

windows

java class files

configuration information

request vulnerability

EPSS

0.006

Percentile

79.1%

JSON

Pramati Server 3.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot (“WEB-INF.”).