CVE:CVE-2008-2120
CNNVD:CNNVD-200805-066
Sun Java System Application Server 7 2004Q2 Update 6之前的版本，SP8之前的Web Server 6.1版本，以及Web Server Update 1之前的7.0版本存在未明漏洞。远程攻击者可以借助未知向量，获得JSP文件的源代码。
solution:Upgrade sun java_system_application_server to a higher version than 7.0,and avoid the version (,7.0]; Upgrade sun java_system_web_server to a higher version than *:sp7,7.0,and avoid the version *:sp7,7.0