VULNERABILITY INTELLIGENCE
CVE-2003-0621
CVSS score5 MEDIUM
EPSS probability8.05%
CISA KEVNot currently listed
Published2003-12-01
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.
Primary references
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Exploit, Patch, Vendor Advisory
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108