Web Servers : Tomcat /status information disclosure

Anfälligkeitssuche		Suche in 324607 CVE Beschreibungen und 145615 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.11218

Kategorie: Web Servers

Titel: Tomcat /status information disclosure

Zusammenfassung: Requesting the URI /status gives information about; the currently running Tomcat.

Beschreibung: Summary:
Requesting the URI /status gives information about
the currently running Tomcat.

Vulnerability Impact:
It also allows anybody to reset (ie: permanently delete) the current
statistics. Additional information gathering about the target is possible as well.

Solution:
If you don't use this feature, comment the appropriate section in
your httpd.conf file. If you really need it, limit its access to
the administrator's machine.

CVSS Score:
6.4

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:N

Copyright Copyright (C) 2003 StrongHoldNet

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.11218
Kategorie:	Web Servers
Titel:	Tomcat /status information disclosure
Zusammenfassung:	Requesting the URI /status gives information about; the currently running Tomcat.
Beschreibung:	Summary: Requesting the URI /status gives information about the currently running Tomcat. Vulnerability Impact: It also allows anybody to reset (ie: permanently delete) the current statistics. Additional information gathering about the target is possible as well. Solution: If you don't use this feature, comment the appropriate section in your httpd.conf file. If you really need it, limit its access to the administrator's machine. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Copyright	Copyright (C) 2003 StrongHoldNet