CVE-2000-0759

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.

Affected products

Apache Tomcat, Jakarta Tomcat

Apache Tomcat

= 3.1

Fix

Available

CVSS 2.0

6.4 MEDIUM

EPSS

25.7% (98th percentile)

NVD status

Modified

Published

2000-09-21