Düşük
CVE-2012-4431: Tomcat: güvenlik açığı
Açıklama (NVD)
org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier.
Özet bilgiler
- Ürün
- Apache Tomcat
- EPSS
- %9,15 (yüzdelik 95)
- CWE
- CWE-264
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| apache-tomcat | 6.0 | 6.0 | — |
| apache-tomcat | 6.0.0 | 6.0.0 | — |
| apache-tomcat | 6.0.0 | 6.0.0 | — |
| apache-tomcat | 6.0.1 | 6.0.1 | — |
| apache-tomcat | 6.0.1 | 6.0.1 | — |
| apache-tomcat | 6.0.2 | 6.0.2 | — |
| apache-tomcat | 6.0.2 | 6.0.2 | — |
| apache-tomcat | 6.0.2 | 6.0.2 | — |
| apache-tomcat | 6.0.3 | 6.0.3 | — |
| apache-tomcat | 6.0.4 | 6.0.4 | — |
| apache-tomcat | 6.0.4 | 6.0.4 | — |
| apache-tomcat | 6.0.5 | 6.0.5 | — |
| apache-tomcat | 6.0.6 | 6.0.6 | — |
| apache-tomcat | 6.0.6 | 6.0.6 | — |
| apache-tomcat | 6.0.7 | 6.0.7 | — |
| apache-tomcat | 6.0.7 | 6.0.7 | — |
| apache-tomcat | 6.0.7 | 6.0.7 | — |
| apache-tomcat | 6.0.8 | 6.0.8 | — |
| apache-tomcat | 6.0.8 | 6.0.8 | — |
| apache-tomcat | 6.0.9 | 6.0.9 | — |
| apache-tomcat | 6.0.9 | 6.0.9 | — |
| apache-tomcat | 6.0.10 | 6.0.10 | — |
| apache-tomcat | 6.0.11 | 6.0.11 | — |
| apache-tomcat | 6.0.12 | 6.0.12 | — |
| apache-tomcat | 6.0.13 | 6.0.13 | — |
| apache-tomcat | 6.0.14 | 6.0.14 | — |
| apache-tomcat | 6.0.15 | 6.0.15 | — |
| apache-tomcat | 6.0.16 | 6.0.16 | — |
| apache-tomcat | 6.0.17 | 6.0.17 | — |
| apache-tomcat | 6.0.18 | 6.0.18 | — |
Kaynaklar
- NVD kaydı
- archives.neohapsis.com
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- marc.info
- marc.info
- rhn.redhat.com
- rhn.redhat.com
- rhn.redhat.com
- rhn.redhat.com
- rhn.redhat.com
- rhn.redhat.com
- secunia.com
- svn.apache.org
- svn.apache.org
- svn.apache.org
- tomcat.apache.org
- tomcat.apache.org
- www.securityfocus.com
- www.securitytracker.com
- www.ubuntu.com
- h20566.www2.hp.com
- CWE-264