CVE-2009-2902

CVE-2009-2902 describes a directory traversal vulnerability in Apache Tomcat versions 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20. This flaw allows remote attackers to delete files within the Tomcat work directory by including directory traversal sequences in a WAR filename during deployment. The vulnerability has a CVSS score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N), indicating it can be exploited remotely with medium attack complexity to achieve partial integrity impact, specifically file deletion. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.