Remote Access to WEB-INF Directory in Allaire JRun 3.0 Servlet Server

CVE-2000-1050 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").

Learn more about our Web App Pen Testing.