'; } else{ echo ''; } echo '
|
|
|||
| Rule General Information |
|---|
| Release Date: | 2026-09-01 | |
| Rule Name: | Apache Tomcat VirtualDirContext Information Disclosure Vulnerability - Trailing Semicolon (CVE-2017-12616) | |
| Severity: | ||
| CVE ID: | ||
| Rule Protection Details |
|---|
| Description: | When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request. | |
| Impact: | An attacker can abtain sensitive information of the target victim, and do malicious actions to gain profits using the information. | |
| Affected OS: | Windows, Linux, Others | |
| Reference: | http://www.securityfocus.com/bid/100897 |
|
| Solutions |
|---|
| Refer to the announcement or patch by the vendor: https://lists.apache.org/thread.html/1df9b4552464caa42047062fe7175da0da06c18ecc8daf99258bbda6@%3Cannounce.tomcat.apache.org%3E |