PT-2011-1255

Name of the Vulnerable Software and Affected Versions Apache JServ version 1.1.2 Description The default configuration of the jserv-status handler in jserv.conf includes an "allow from 127.0.0.1" line. This allows local users to discover JDBC passwords or other sensitive information via a direct...