CVE-2006-3921

No fix known EPSS 2%

Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI.

Published 2006-07-28 · CVE record · OSV

Products: sun java_system_application_server, sun java_system_web_server