Lucene search

K
cvelistMitreCVELIST:CVE-2011-1419
HistoryMar 14, 2011 - 7:00 p.m.

CVE-2011-1419

2011-03-1419:00:00
mitre
www.cve.org
1

4.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.3%

Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088.

4.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.3%