CVE-2002-1822: IBM HTTP Server

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a request is made for a non-existent Java Server Page (JSP).

Affected products

• IBM HTTP Server: version 1.0 only

Published 2002-12-31. Last modified 2026-06-16.