| Package | Affected versions | Patched versions |
|---|---|---|
| java system application server | = 7.0= 7.1= 8.1 | |
| java system web server | = 6.0= 6.1 |
Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free