Orta CVSS 4.3
CVE-2020-13943: Tomcat: güvenlik açığı
Açıklama (NVD)
If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.
Özet bilgiler
- Ürün
- Apache Tomcat
- CVSS v3.1
- 4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - EPSS
- %52,64 (yüzdelik 99)
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| apache-tomcat | 8.5.0 | 8.5.0 | — |
| apache-tomcat | 8.5.1 | 8.5.1 | — |
| apache-tomcat | 8.5.2 | 8.5.2 | — |
| apache-tomcat | 8.5.3 | 8.5.3 | — |
| apache-tomcat | 8.5.4 | 8.5.4 | — |
| apache-tomcat | 8.5.5 | 8.5.5 | — |
| apache-tomcat | 8.5.6 | 8.5.6 | — |
| apache-tomcat | 8.5.7 | 8.5.7 | — |
| apache-tomcat | 8.5.8 | 8.5.8 | — |
| apache-tomcat | 8.5.9 | 8.5.9 | — |
| apache-tomcat | 8.5.10 | 8.5.10 | — |
| apache-tomcat | 8.5.11 | 8.5.11 | — |
| apache-tomcat | 8.5.12 | 8.5.12 | — |
| apache-tomcat | 8.5.13 | 8.5.13 | — |
| apache-tomcat | 8.5.14 | 8.5.14 | — |
| apache-tomcat | 8.5.15 | 8.5.15 | — |
| apache-tomcat | 8.5.16 | 8.5.16 | — |
| apache-tomcat | 8.5.17 | 8.5.17 | — |
| apache-tomcat | 8.5.18 | 8.5.18 | — |
| apache-tomcat | 8.5.19 | 8.5.19 | — |
| apache-tomcat | 8.5.20 | 8.5.20 | — |
| apache-tomcat | 8.5.21 | 8.5.21 | — |
| apache-tomcat | 8.5.22 | 8.5.22 | — |
| apache-tomcat | 8.5.23 | 8.5.23 | — |
| apache-tomcat | 8.5.24 | 8.5.24 | — |
| apache-tomcat | 8.5.25 | 8.5.25 | — |
| apache-tomcat | 8.5.26 | 8.5.26 | — |
| apache-tomcat | 8.5.27 | 8.5.27 | — |
| apache-tomcat | 8.5.28 | 8.5.28 | — |
| apache-tomcat | 8.5.29 | 8.5.29 | — |