Vulnerabilities > CVE-2000-0499 - Improper Handling of Case Sensitivity vulnerability in BEA Weblogic Server

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
bea
CWE-178
NVD
Published: 2000-06-08
Updated: 2024-11-20

Summary

The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.

Vulnerable Configurations

Part Description Count
Application
Bea
7

Common Weakness Enumeration (CWE)

References