VULNERABILITY INTELLIGENCE

CVE-2003-0043

CVSS score5 MEDIUM
EPSS probability4.51%
CISA KEVNot currently listed
Published2003-02-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.

Primary references