GCVE-110-CERTCC-2002-116963

Advisory Published

Vulnetix · Advisory published May 29, 2002

There is an insecure default configuration in Apache Tomcat web server that places several sample applications in the webroot. Remote users may be able to use these applications to gain sensitive information about the server's configuration.

Download JSON Open in Console

Risk Scores

certcc-cam

impact2population10exploitation0widely_known15score_current3ease_of_exploitation20

References

Apache Tomcat default installation contains sample applications that disclose webroot path

advisory

Apache Tomcat default installation contains sample applications that disclose webroot path

url

Apache Tomcat default installation contains sample applications that disclose webroot path

url

Apache Tomcat default installation contains sample applications that disclose webroot path

url

Apache Tomcat default installation contains sample applications that disclose webroot path

url

Apache Tomcat default installation contains sample applications that disclose webroot path

url

Apache Tomcat default installation contains sample applications that disclose webroot path

url

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON