CVE-2002-1394

Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.

Scoring

CVSS base score
0.21
EPSS probability
5.35%
Published
2004-09-01
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs