Macromedia JRun 3.0 up to and including 4.0, when running on Windows, allows remote malicious users to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
macromedia jrun 3.0 |
||
macromedia jrun 3.1 |
||
macromedia jrun 4.0 |
Vulmon