| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.tomcat:tomcat | < 3.3.1a | 3.3.1a |
| tomcat | = 3.0= 3.1= 3.1.1= 3.2= 3.2.1= 3.2.3= 3.2.4= 3.3= 3.3.1 |
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free