Nessus Plugin #11724

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

WebLogic source code disclosure

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2003 John Lampe

Summary:

Checks for WebLogic file disclosures

Version:

$Revision: 1.5 $

Cve_id:

CVE-2000-0682

Bugtraq_id:

1518

Xrefs:

-

Description:

There is a bug in the Weblogic web application. Namely,
by inserting a /ConsoleHelp/ into a URL, critical source code
files may be viewed.

Solution : See http://developer.bea.com/alerts/security_000731.html

Risk factor : High