CVE-2000-0499: High severity Bea WebLogic Server vulnerability
The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0499?
CVE-2000-0499 has a severity rating that indicates it allows remote code exposure, which can lead to significant security risks.
How do I fix CVE-2000-0499?
To fix CVE-2000-0499, update BEA WebLogic Server to a version that is not affected or configure your web server to restrict access to JSP source files.
Which versions of BEA WebLogic Server are affected by CVE-2000-0499?
Versions 3.1.8 through 4.5.1 of BEA WebLogic Server are affected by CVE-2000-0499.
What type of attack does CVE-2000-0499 enable?
CVE-2000-0499 enables a remote attacker to view source code of JSP programs, potentially leading to further exploitation.
Is there a workaround for CVE-2000-0499?
A workaround for CVE-2000-0499 includes configuring the application server to deny requests that expose JSP source files.