CVE-2003-0043
Tomcat uses trusted privileges when processing web.xml file
EPSS 3.2%
Description
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.
How to fix CVE-2003-0043
To remediate CVE-2003-0043, upgrade the affected package to a fixed version below.
- Maven/org.apache.tomcat:tomcat—upgrade to 3.3.1a or later
Is CVE-2003-0043 being exploited?
Low — EPSS is 3.2%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 3.3.1a