CVE-2019-17569

🗓️ 24 Feb 2020 21:04:40Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 532 Views

Apache Tomcat vulnerability CVE-2019-1756

Reporter	Title	Published	Views	Family All 117
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence has addressed multiple vulnerabilities (Q12021)	29 Jan 202118:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affects IBM Platform Symphony	6 Apr 202003:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution & App Connect Professional is affected by Apache Tomcat vulnerabilities.	10 May 202017:02	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2019-17569, CVE-2020-1935 HTTP Request Smuggling if Tomcat was located behind a reverse proxy	5 Nov 202019:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus affected by multiple Apache Tomcat vulnerabilities.	26 Jun 202012:28	–	ibm
IBM Security Bulletins	Security Bulletin: [All] Apache Tomcat (core only) (Publicly disclosed vulnerability) CVE-2020-1935, CVE-2019-17569	24 Jul 202021:16	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (CVE-2020-1935, CVE-2019-17569)	24 Jul 202022:19	–	ibm
Tenable Nessus	Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-012)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : tomcat7 (ALAS-2020-1352)	16 Mar 202000:00	–	nessus

NVD

Vulners

Node

apache tomcatRange7.0.98–7.0.99

apache tomcatRange8.5.48–8.5.50

apache tomcatRange9.0.28–9.0.30

apache tomeeMatch7.0.7

Node

opensuse leapMatch15.1

Node

netapp data_availability_servicesMatch-

netapp oncommand_system_managerRange3.0.0–3.1.3

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

oracle agile_engineering_data_managementMatch6.2.1.0

oracle agile_plmMatch9.3.3

oracle agile_plmMatch9.3.5

oracle agile_plmMatch9.3.6

oracle communications_instant_messaging_serverMatch10.0.1.4.0

oracle health_sciences_empirica_inspectionsMatch1.0.1.2

oracle health_sciences_empirica_signalMatch7.3.3

oracle hospitality_guest_accessMatch4.2.0

oracle hospitality_guest_accessMatch4.2.1

oracle instantis_enterprisetrackRange17.1–17.3

oracle mysql_enterprise_monitorRange≤4.0.12

oracle mysql_enterprise_monitorRange8.0.0–8.0.20

oracle transportation_managementMatch6.3.7

oracle workload_managerMatch12.2.0.1

oracle workload_managerMatch18c

oracle workload_managerMatch19c

[
  {
    "product": "Apache Tomcat",
    "vendor": "Apache",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Tomcat 9.0.28 to 9.0.30"
      },
      {
        "status": "affected",
        "version": "8.5.48 to 8.5.50"
      },
      {
        "status": "affected",
        "version": "7.0.98 to 7.0.99"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2021.html
lists	www.lists.apache.org/thread.html/r7bc994c965a34876bd94d5ff15b4e1e30b6220a15eb9b47c81915b78%40%3Ccommits.tomee.apache.org%3E
debian	www.debian.org/security/2020/dsa-4673
lists	www.lists.debian.org/debian-lts-announce/2020/03/msg00006.html
security	www.security.netapp.com/advisory/ntap-20200327-0005/
oracle	www.oracle.com/security-alerts/cpuoct2020.html
lists	www.lists.apache.org/thread.html/r88def002c5c78534674ca67472e035099fbe088813d50062094a1390%40%3Cannounce.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/rc31cbabb46cdc58bbdd8519a8f64b6236b2635a3922bbeba0f0e3743%40%3Ccommits.tomee.apache.org%3E
debian	www.debian.org/security/2020/dsa-4680
lists	www.lists.opensuse.org/opensuse-security-announce/2020-03/msg00025.html

21 Nov 2024 04:32Current

7High risk

Vulners AI Score7

CVSS 3.14.8

CVSS 25.8

EPSS0.06163

CWE-444