Intrusion PreventionApache.Tomcat.Directory.Listing.Information.Disclosure
Description
This indicates an attempt to exploit an information disclosure vulnerability in Apache Tomcat.
The vulnerability is a result of the program's failure to properly sanitize user supplied input. An attacker can exploit this to reveal a complete directory listing of any directory. The information obtained may aid in further attacks.
Affected Products
Apache Tomcat Versions 5.028, 5.5.23, 5.5.9, and 5.5.7.
Other versions may also be affected.
Impact
Information disclosure.
Recommended Actions
Upgrade to the latest version.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 13268 |
| Created | Oct 17, 2006 |
| Updated | Jun 09, 2022 |
| Risk |
|
| CVE ID | CVE-2006-3835 |
| Exploit Prediction Score | 87.71% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Apache |