CVE-2008-2120 Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to obtain source code of...
MediumCVSS 5.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to obtain source code of JSP files via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java system application server | <= 7.0 | No fix listed |
| sun java system web server | <= 6.1 | No fix listed |
| sun java system web server | = 7.0 | No fix listed |
References
- 30122 third-party-advisory vendor-advisory
- 201255 patch vendor-advisory
- 29088 patch vdb-entry
- 1019985 vdb-entry
- 1019986 vdb-entry
- ADV-2008-1457 vdb-entry
- javasystem-jsp-information-disclosure(42266) vdb-entry