İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Yüksek CVSS 7.5

CVE-2017-12616: Tomcat: hassas bilgi ifşası

Yayın: · Güncelleme:

Açıklama (NVD)

When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.

Özet bilgiler

Ürün
Apache Tomcat
CVSS v3.1
7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
%70,12 (yüzdelik 99)
CWE
CWE-200
Yama
Yok / bilinmiyor

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
apache-tomcat7.0.07.0.0—
apache-tomcat7.0.07.0.0—
apache-tomcat7.0.17.0.1—
apache-tomcat7.0.27.0.2—
apache-tomcat7.0.27.0.2—
apache-tomcat7.0.37.0.3—
apache-tomcat7.0.47.0.4—
apache-tomcat7.0.47.0.4—
apache-tomcat7.0.57.0.5—
apache-tomcat7.0.57.0.5—
apache-tomcat7.0.67.0.6—
apache-tomcat7.0.77.0.7—
apache-tomcat7.0.87.0.8—
apache-tomcat7.0.97.0.9—
apache-tomcat7.0.107.0.10—
apache-tomcat7.0.117.0.11—
apache-tomcat7.0.127.0.12—
apache-tomcat7.0.137.0.13—
apache-tomcat7.0.147.0.14—
apache-tomcat7.0.157.0.15—
apache-tomcat7.0.167.0.16—
apache-tomcat7.0.177.0.17—
apache-tomcat7.0.187.0.18—
apache-tomcat7.0.197.0.19—
apache-tomcat7.0.207.0.20—
apache-tomcat7.0.217.0.21—
apache-tomcat7.0.227.0.22—
apache-tomcat7.0.237.0.23—
apache-tomcat7.0.247.0.24—
apache-tomcat7.0.257.0.25—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları