Skip to content

H3-2022-0047

Apache Tomcat Example Scripts Exposed

Category SECURITY_MISCONFIGURATION
Base Score 4.0

Description

Example scripts come with Apache Tomcat v4.x - v7.x by default

Impact

These files can be used by attackers to gain information about the system. These scripts are also known to be vulnerable to cross site scripting (XSS) injection and may leak sensitive session information about users.

References