CVE-2007-2353 – Apache AXIS 1.0 - Non-Existent WSDL Path Information Disclosure

https://notcve.org/view.php?id=CVE-2007-2353

Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message. Apache Axis 1.0 permite a atacantes remotos obtener información confidencial al solicitar un fichero WSDL no existente, lo cual revela la ruta de instalación en el mensaje de excepción resultante. • https://www.exploit-db.com/exploits/29930 http://attrition.org/pipermail/vim/2007-April/001562.html http://www.osvdb.org/34154 http://www.securityfocus.com/bid/23687 https://exchange.xforce.ibmcloud.com/vulnerabilities/34167 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •