Java (.java / .class) Source Code Disclosure

medium Nessus Plugin ID 12245

Language:

Synopsis

The remote web server is disclosing potentially sensitive data.

Description

The remote web server is hosting Java (.java and/or .class) files. These files may contain sensitive or proprietary information. If so, a remote attacker could use this information to mount further attacks.

Solution

Restrict access to any sensitive data.

Plugin Details

Severity: Medium

ID: 12245

File Name: java_source_retrieval.nasl

Version: 1.17

Type: remote

Family: CGI abuses

Published: 5/20/2004

Updated: 1/19/2021

Supported Sensors: Nessus

Vulnerability Information

Excluded KB Items: Settings/disable_cgi_scanning

Exploited by Nessus: true

Detections

Analytics