The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to…
The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks…