Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows.
AV:N/AC:L/Au:N/C:P/I:N/A:N
This vulnerability has a 4.85% probability of being exploited in the next 30 days, ranking higher than 92% of all scored CVEs.