CVE-2001-1372

published 2002-02-06

CVE-2001-1372: Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP…

medium 5 CVSS 3.1

AV N AC L Au N C P I N A N

Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP file, which leaks the pathname in an error message.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
oracle	application_server	—	—