Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request
An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2016-8747US | high7.5 | — | ||
An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote atta… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://svn.apache.org/viewvc?view=revision&revision=1774161WEB
- http://svn.apache.org/viewvc?view=revision&revision=1774166WEB
- http://tomcat.apache.org/security-8.htmlWEB
- http://tomcat.apache.org/security-9.htmlWEB
- http://www.securityfocus.com/bid/96895WEB
- https://github.com/apache/tomcatPACKAGE
- https://github.com/apache/tomcat/commit/452c8094a665ef6375530e81c033da4eeb2e4865WEB
- https://github.com/apache/tomcat/commit/9601a937ff3b7ef5d04b2a0e950d0e44e1bb4cbdWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan