CVE-2000-1247

CVSS 2.0: 2.1 low
EPSS: —
Published: Oct 5, 2011 · Oct 5, 2011
Modified: Nov 11, 2026

Analyze CVE-2000-1247 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to discover JDBC passwords or other sensitive information via a direct request to the jserv/ URI.

Vendors: apache

Products: jserv

Weakness: CWE-16

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (—)

In the news

0 stories

No ingested article mentions this CVE yet.