First published: Wed May 16 2007(Updated: )
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the system path via certain URLs associated with (1) deploying web applications or (2) displaying .xtp files.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Caucho Resin | <=3.1.0 | |
Caucho Resin | <=3.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-2441 is considered a medium severity vulnerability due to its potential for information disclosure.
To mitigate CVE-2007-2441, upgrade to a version of Caucho Resin later than 3.1.0.
CVE-2007-2441 affects Caucho Resin Professional 3.1.0 and earlier versions running on Windows.
CVE-2007-2441 allows remote attackers to obtain the system path through specific URLs.
If upgrading is not an option, restrict access to the affected URLs to mitigate the risk of exploitation.