CVEvulnerability

CVE-2000-1114

5.0 MEDIUM Published 2001-01-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-01-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".

Affected configurations

• unify ewave servletexec 3.0 • unify ewave servletexec 3.0c

Related

Referenced by CWE · observed example (2)

  • CWE-41 Improper Resolution of Path Equivalence weakness
  • CWE-42 Path Equivalence: 'filename.' (Trailing Dot) weakness

References