Description

The Snoop Servlet returns information about the HTTP request itself and sometimes. It could help an attacker to prepare more advanced attacks

Remediation

Remove the Snoop Servlet from production systems or restrict access to it.

References

Snoop Servlet

IBM WebSphere Application Server snoop servlet information disclosure

Related Vulnerabilities

WebLogic admin console weak credentials

PHP-CGI remote code execution

WordPress Plugin Import all XML, CSV & TXT into WordPress Arbitrary File Disclosure (3.7)

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.17)

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.25)

Severity

Low

Classification

CWE-200 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure