Information
Vulnerability Key: V0002265
IA Controls: ECSC-1 Security Configuration Compliance
Categories: 7.7 Code Validation
Severity: Category II
Ref: WEB SERVER SECURITY TECHNICAL IMPLEMENTATION GUIDE Section 4.7
From source code in a .java or .jpp file, the Java compiler produces a binary file with an extension
of .class. The .java or .jpp file would therefore reveal sensitive information regarding an applications
logic and permissions to resources on the server. By contrast the .class file, because it is intended to
be machine independent, is referred to a bytecode. Bytecodes are run by the Java Virtual Machine,
JVM, or Java Runtime Environment, JRE, via a browser configured to permit Java code.
NOTE: This check only searches the 'C:' drive, if the system has multiple drives ensure each drive doesn't contain compilers.
NOTE: If there is nothing reported in the plugin output then Nessus did not find any backup files on the system.