Sun-Java-App-Server PE version 8.0 suffers from a path disclosure vulnerability when returning server error 500 pages.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33439/sunjavaapp.txt
Source: https://packetstormsecurity.com/files/33439/sunjavaapp.txt.html