Unknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF and META-INF directories and execute arbitrary JavaServer Pages (JSP), a variant of CVE-2000-1050.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-1489
http://www.securityfocus.com/bid/3662