CVE-2000-0672: Apache Tomcat

Medium severity, CVSS 5.0. EPSS: 10% chance of exploitation in the next 30 days.

The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory.

Affected products

• Apache Tomcat: version 3.0 only; version 3.1 only

Published 2000-07-20. Last modified 2026-06-16.