Apache Tomcat Source Code Disclosure Vulnerability

CVE-2002-1394 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.

Learn more about our Cis Benchmark Audit For Apache Tomcat.