Security Advisory

CVE-2006-2438

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-05-17 10:00:00

Last updated 2024-08-07 17:51:04

Assigner mitre

State PUBLISHED

Description

Directory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to read arbitrary files under other web roots via the contextpath parameter. NOTE: this issue can produce resultant path disclosure when the parameter is invalid.

← Browse all CVEs View on cve.org ↗