GitHub Advisoryadvisory · Maven

GHSA-cvx5-7vc7-rg77 Tomcat uses trusted privileges when processing web.xml file

MEDIUM Published 2022-04-29 Modified 2025-04-03 Official page ↗
Aliases
CVE-2003-0043
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-250
Reviewed
2025-04-03

Affected packages

• Maven org.apache.tomcat:tomcat: < 3.3.1a → fixed in 3.3.1a

Description

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.

Related

Alias · CVE (1)

  • CVE-2003-0043 Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could… vulnerability

Weakness · CWE (1)

  • CWE-250 Execution with Unnecessary Privileges weakness

References