Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-2902
HistoryJan 28, 2010 - 8:30 p.m.

CVE-2009-2902

2010-01-2820:30:00
CWE-22
[email protected]
web.nvd.nist.gov
66
cve-2009-2902
apache tomcat
directory traversal
vulnerability
nvd
security
apache tomcat 5.5
apache tomcat 6.0
remote attackers

4.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.9%

JSON

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the …war filename.

References

Related

veracode 1
osv 1
github 1
ubuntucve 1
prion 1
securityvulns 5
nessus 25
ubuntu 1
openvas 22
redhat 3
oraclelinux 1
tomcat 2
centos 1
debian 1
gentoo 1
threatpost 1
veracode
veracode
Directory Traversal
2018-11-09 01:47:07
osv
osv
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat
2022-05-02 03:39:48
github
github
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat
2022-05-02 03:39:48
ubuntucve
ubuntucve
CVE-2009-2902
2010-01-28 00:00:00
prion
prion
Directory traversal
2010-01-28 20:30:00
securityvulns
securityvulns
Apache Tomcat multiple security vulnerabilities
2010-01-26 00:00:00
[SECURITY] CVE-2009-2902 Apache Tomcat unexpected file deletion in work directory
2010-01-26 00:00:00
[SECURITY] CVE-2009-2901 Apache Tomcat insecure partial deploy after failed undeploy
2010-01-26 00:00:00
nessus
nessus
Ubuntu 8.10 / 9.04 / 9.10 : tomcat6 vulnerabilities (USN-899-1)
2010-02-12 00:00:00
SuSE 10 Security Update : tomcat5 (ZYPP Patch Number 7003)
2010-04-28 00:00:00
SuSE Security Update: Security update for Tomcat 5 (tomcat5-6841)
2010-04-09 00:00:00
ubuntu
ubuntu
Tomcat vulnerabilities
2010-02-11 00:00:00
openvas
openvas
HP-UX Update for Tomcat Servlet Engine HPSBUX02541
2010-06-23 00:00:00
Ubuntu Update for tomcat6 vulnerabilities USN-899-1
2010-02-15 00:00:00
Apache Tomcat Multiple Vulnerabilities (Jan 2010)
2010-01-28 00:00:00
redhat
redhat
(RHSA-2010:0582) Important: tomcat5 security update
2010-08-02 00:00:00
(RHSA-2010:0119) Low: JBoss Enterprise Web Server 1.0.1 update
2010-02-23 00:00:00
(RHSA-2010:0580) Important: tomcat5 security update
2010-08-02 00:00:00
oraclelinux
oraclelinux
tomcat5 security update
2010-08-02 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 6.0.24
2010-01-21 00:00:00
Fixed in Apache Tomcat 5.5.29
2010-04-20 00:00:00
centos
centos
tomcat5 security update
2010-08-03 00:39:04
debian
debian
[SECURITY] [DSA 2207-1] tomcat5.5 security update
2011-03-29 22:35:34
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

4.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.9%

JSON
Related for CVE-2009-2902
veracode1osv1github1ubuntucve1prion1securityvulns5nessus25ubuntu1openvas22redhat3oraclelinux1tomcat2centos1debian1gentoo1threatpost1