CVE-2000-1114: Medium severity Unify eWave ServletExec vulnerability
Published Dec 19, 2000
·Updated
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".
Affected Software
2 affected components
Unify eWave ServletExec=3.0c
Unify eWave ServletExec=3.0
Remediation
Patch Available
Event History
Dec 19, 2000
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-1114?
CVE-2000-1114 is categorized as a medium severity vulnerability.
2
How does CVE-2000-1114 impact Unify eWave ServletExec?
CVE-2000-1114 allows remote attackers to read the source code of JSP pages, potentially exposing sensitive information.
3
What versions of Unify eWave ServletExec are affected by CVE-2000-1114?
CVE-2000-1114 affects Unify eWave ServletExec versions 3.0 and 3.0C.
4
How can I mitigate CVE-2000-1114?
To mitigate CVE-2000-1114, configure the servlet container to restrict access to JSP source files.
5
Is there a patch available for CVE-2000-1114?
There is no specific patch for CVE-2000-1114; users are advised to apply best practices for securing web applications.