Apache Tomcat < 3.3.1a Directory Listing and File Disclosure
Medium Log Correlation Engine Plugin ID 800630
SynopsisThe remote host may give an attacker information useful for future attacks
DescriptionApache Tomcat (prior to 3.3.1a) is prone to a directory listing and file disclosure vulnerability. An attacker may exploit this bug to get the listing of directories otherwise protected by an index.html file, or even to get the source code of the remote .jsp scripts.
SolutionUpgrade to Tomcat 3.3.1a or higher.