Vulnerabilities > CVE-2000-0498 - Improper Handling of Case Sensitivity vulnerability in Unify Ewave Servletexec

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
unify
CWE-178
NVD
Published: 2000-06-08
Updated: 2024-11-20

Summary

Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.

Vulnerable Configurations

Part Description Count
Application
Unify
1

Common Weakness Enumeration (CWE)

References