The vulnerability of the mod_rewrite function in the Apache Tomcat application server allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

🗓️ 29 Jul 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Mod rewrite vulnerability in Apache Tomcat redirects to insecure sites, risking data confidentiality, integrity, and availability.

Reporter	Title	Published	Views	Family All 179
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM HTTP Server and IBM WebSphere Application Server used in IBM WebSphere Application Server in IBM Cloud	16 Jun 202013:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2020-1927, CVE-2020-1934)	17 Apr 202021:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM HTTP Server affects IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise	9 Sep 202010:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache HTTP CVE-2019-10098 and CVE-2020-1927.	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM HTTP Server used by IBM Rational ClearQuest (CVE-2020-1927, CVE-2020-1934)	3 Jun 202004:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server, which is shipped with, or a required product for, IBM Tivoli Network Manager (CVE-2020-1927, CVE-2020-1934)	28 Jul 202013:29	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server	15 Apr 202019:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm

Vulners

Node

oracle instantis_enterprisetrackMatch17.1

oracle instantis_enterprisetrackMatch17.2

oracle instantis_enterprisetrackMatch17.3

oracle oracle_communications_element_managerMatch8.1.1

oracle oracle_communications_element_managerMatch8.2.0

oracle oracle_communications_session_report_managerMatch8.1.1

oracle oracle_communications_session_report_managerMatch8.2.0

oracle oracle_communications_session_route_managerMatch8.1.1

oracle oracle_communications_session_route_managerMatch8.2.0

oracle oracle_communications_element_managerMatch8.2.1

oracle oracle_communications_session_report_managerMatch8.2.1

oracle oracle_communications_session_route_managerMatch8.2.1

oracle enterprise_manager_ops_centerMatch12.4.0.0

oracle communications_instant_messaging_serverMatch10.0.1.4.0

apache http_serverRange2.4.0–2.4.41

canonical ubuntuMatch16.04

novell opensuse_leapMatch15.1

canonical ubuntuMatch20.10

Source	Link
oracle	www.oracle.com/security-alerts/cpujul2020.html
suse	www.suse.com/security/cve/CVE-2020-1927/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-1927
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
people	www.people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-1927.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-1927
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20211019SE81
altsp	www.altsp.su/obnovleniya-bezopasnosti/
abf	www.abf.rosa.ru/advisories/ROSA-SA-2025-2900
abf	www.abf.rosa.ru/advisories/ROSA-SA-2025-2860

19 Aug 2025 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 25.8

CVSS 36.1

EPSS0.04949