Vulnerability Details : CVE-2006-2437
The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to obtain the source code for file under the web root via the file parameter.
Exploit prediction scoring system (EPSS) score for CVE-2006-2437
Probability of exploitation activity in the next 30 days: 3.21%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 90 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-2437
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
References for CVE-2006-2437
Products affected by CVE-2006-2437
- cpe:2.3:a:caucho_technology:resin:3.0.18:*:*:*:*:*:*:*
- cpe:2.3:a:caucho_technology:resin:3.0.17:*:*:*:*:*:*:*