CVE-2007-5366

Fujitsu Interstage Application Server 7.0-9.0.0 - Information Disclosure via Tomcat Servlet Service

Title source: llm
STIX 2.1

Description

The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information (web root path) via unspecified vectors that trigger an error message, probably related to enabling the useCanonCaches Java Virtual Machine (JVM) option.

References (5)

Core 5
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27136
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/37026
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/41318
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25988

Scores

EPSS 0.0217
EPSS Percentile 80.1%

Details

CWE
CWE-22
Status published
Products (12)
fujitsu/interstage_application_server 7.0 (3 CPE variants)
fujitsu/interstage_application_server 7.0.1 (2 CPE variants)
fujitsu/interstage_application_server 8.0.0 (2 CPE variants)
fujitsu/interstage_application_server 8.0.1 (2 CPE variants)
fujitsu/interstage_application_server 8.0.2 (2 CPE variants)
fujitsu/interstage_application_server 8.0.3 (2 CPE variants)
fujitsu/interstage_application_server 9.0 (2 CPE variants)
fujitsu/interstage_application_server 9.0a (2 CPE variants)
fujitsu/interstage_apworks 7.0
fujitsu/interstage_apworks 8.0 (2 CPE variants)
... and 2 more
Published Oct 11, 2007
Tracked Since Feb 18, 2026