Lucene search
HistoryJan 27, 2009 - 2:30 a.m.
CVE-2009-0278
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.3%
Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2) META-INF directory via a malformed request.
Affected configurations
Node
sunjava_system_application_serverMatch8.1linux
ORsunjava_system_application_serverMatch8.1sparc
ORsunjava_system_application_serverMatch8.1windows
ORsunjava_system_application_serverMatch8.1x86
ORsunjava_system_application_serverMatch8.2linux
ORsunjava_system_application_serverMatch8.2sparc
ORsunjava_system_application_serverMatch8.2windows
ORsunjava_system_application_serverMatch8.2x86
Related
prion
prion
Design/Logic Flaw
2009-01-27 02:30:00
cve
cve
CVE-2009-0278
2009-01-27 02:30:04
openvas
openvas
Sun Java System Application Server Information Disclosure vulnerability
2009-02-06 00:00:00
Sun Java System Application Server Information Disclosure vulnerability
2009-02-06 00:00:00
cvelist
cvelist
CVE-2009-0278
2009-01-27 02:00:00
nessus
nessus
Sun Java System Application Server Information Disclosure
2013-07-18 00:00:00
Solaris 10 (x86) : 119167-43 (deprecated)
2006-11-06 00:00:00
Solaris 10 (x86) : 124673-20
2018-03-12 00:00:00
seebug
seebug
Sun Java系统应用服务器远程信息泄露漏洞
2009-02-02 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.3%
Related for NVD:CVE-2009-0278