← Database

CVE-2006-3921

MEDIUM CVSS: 4.0 Published: 2006-07-28 Modified: 2026-06-16

Description

Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI.

Affected Platforms

Sun Java System Web ServerSun Java System Application Server

Weakness Type

NVD-CWE-Other

References