Orta CVSS 5.3

CVE-2015-5345: Debian Linux: dizin geçişi

Yayın: 25 Şubat 2016 03:59 · Güncelleme: 6 Kasım 2026 09:45

Açıklama (NVD)

The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence of a directory via a URL that lacks a trailing / (slash) character.

Özet bilgiler

Ürün: Debian Debian Linux
CVSS v3.1: 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: %18,38 (yüzdelik 97)
CWE: CWE-22
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
debian-debian-linux	7.0	7.0	—
debian-debian-linux	8.0	8.0	—
apache-tomcat	6.0.0	6.0.0	—
apache-tomcat	6.0.0	6.0.0	—
apache-tomcat	6.0.1	6.0.1	—
apache-tomcat	6.0.1	6.0.1	—
apache-tomcat	6.0.2	6.0.2	—
apache-tomcat	6.0.2	6.0.2	—
apache-tomcat	6.0.2	6.0.2	—
apache-tomcat	6.0.4	6.0.4	—
apache-tomcat	6.0.4	6.0.4	—
apache-tomcat	6.0.10	6.0.10	—
apache-tomcat	6.0.11	6.0.11	—
apache-tomcat	6.0.13	6.0.13	—
apache-tomcat	6.0.14	6.0.14	—
apache-tomcat	6.0.16	6.0.16	—
apache-tomcat	6.0.18	6.0.18	—
apache-tomcat	6.0.20	6.0.20	—
apache-tomcat	6.0.24	6.0.24	—
apache-tomcat	6.0.26	6.0.26	—
apache-tomcat	6.0.28	6.0.28	—
apache-tomcat	6.0.29	6.0.29	—
apache-tomcat	6.0.30	6.0.30	—
apache-tomcat	6.0.32	6.0.32	—
apache-tomcat	6.0.33	6.0.33	—
apache-tomcat	6.0.35	6.0.35	—
apache-tomcat	6.0.36	6.0.36	—
apache-tomcat	6.0.37	6.0.37	—
apache-tomcat	6.0.39	6.0.39	—
apache-tomcat	6.0.41	6.0.41	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları