Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request
An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-8747US | high7.5 | — | ||
An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote atta… | ||||
02
references
External citations — patches, advisories, analysis.
- http://svn.apache.org/viewvc?view=revision&revision=1774161WEB
- http://svn.apache.org/viewvc?view=revision&revision=1774166WEB
- http://tomcat.apache.org/security-8.htmlWEB
- http://tomcat.apache.org/security-9.htmlWEB
- http://www.securityfocus.com/bid/96895WEB
- https://github.com/apache/tomcatPACKAGE
- https://github.com/apache/tomcat/commit/452c8094a665ef6375530e81c033da4eeb2e4865WEB
- https://github.com/apache/tomcat/commit/9601a937ff3b7ef5d04b2a0e950d0e44e1bb4cbdWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan