Vulnerability Description: The remote web server includes an example JSP application (/tomcat-docs/) that fails to sanitise user-supplied input before using it to generate dynamic content in an error page. An unauthenticated remote attacker may be able to leverage this issue to inject arbitrary HTML or script code into a user’s browser to be executed within the security context of the affected site.
Risk Level: High
By triggering the http://server/tomcat-docs/appdev/sample/web/hello.jsp? the attacker is able to inject java script which allows him to perform a cross-site scripting attack. Using this it is possible to hijack user?s session, username and password.
Initial Recommendations:
? Un-deploy the Tomcat documentation web application.
— How can we Un-deploy the Tomcat documentation web application.