| Package | Affected versions | Patched versions |
|---|---|---|
| tomcat | = 3.0= 3.1 |
The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free