Page 2 of 6 results (0.003 seconds)

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 2

Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message. Apache Axis 1.0 permite a atacantes remotos obtener información confidencial al solicitar un fichero WSDL no existente, lo cual revela la ruta de instalación en el mensaje de excepción resultante. • https://www.exploit-db.com/exploits/29930 http://attrition.org/pipermail/vim/2007-April/001562.html http://www.osvdb.org/34154 http://www.securityfocus.com/bid/23687 https://exchange.xforce.ibmcloud.com/vulnerabilities/34167 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •