CVE-2020-17527 Apache Tomcat: Request header mix-up between HTTP/2 streams

🗓️ 03 Dec 2020 18:30:14Reported by apacheType

Apache Tomcat: HTTP/2 Request header mix-up CVE-2020-1752

Reporter	Title	Published	Views	Family All 165
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	27 Jul 202116:25	–	ibm
IBM Security Bulletins	Security Bulletin: : App Connect Professional is affected by Apache Tomcat vulnerabilities.	19 Mar 202112:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2020-17527	25 Jan 202207:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Apache Tomcat Vulnerabilities Affect IBM Control Center	14 May 202121:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	2 Feb 202105:06	–	ibm
Tenable Nessus	Apache Tomcat < 10.0.0-M10 Multiple Vulnerabilities	14 Apr 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-010)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : tomcat8 (ALAS-2020-1473) (deprecated)	18 Dec 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : tomcat8 (ALAS-2021-1473)	14 Jan 202100:00	–	nessus

[
  {
    "product": "Apache Tomcat",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Tomcat 10 10.0.0-M1 to 10.0.0-M9"
      },
      {
        "status": "affected",
        "version": "Apache Tomcat 9 9.0.0-M1 to 9.0.39"
      },
      {
        "status": "affected",
        "version": "Apache Tomcat 8.5 8.5.0 to 8.5.59"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20201210-0003/
lists	www.lists.apache.org/thread.html/r8a227ac6a755a6406c1cc47dd48800e973d4cf13fe7fe68ac59c679c%40%3Cdev.tomcat.apache.org%3E
oracle	www.oracle.com/security-alerts/cpujan2022.html
oracle	www.oracle.com//security-alerts/cpujul2021.html
lists	www.lists.apache.org/thread.html/rd5babd13d7a350b369b2f647b4dd32ce678af42f9aba5389df1ae6ca%40%3Cusers.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/ra9fcdb904dd2e2256ef90b3e4ced279cd464cb0ab63a6c64df5c010d%40%3Cannounce.apache.org%3E
lists	www.lists.apache.org/thread.html/ra35c8d617b17d59f400112cebadec43ad379f98198b4a9726190d7ee%40%3Cissues.guacamole.apache.org%3E
lists	www.lists.apache.org/thread.html/ra9fcdb904dd2e2256ef90b3e4ced279cd464cb0ab63a6c64df5c010d%40%3Cannounce.tomcat.apache.org%3E
openwall	www.openwall.com/lists/oss-security/2020/12/03/3
lists	www.lists.apache.org/thread.html/r9fd47f1b03e9b41d16a5cf72659b533887267d3398d963c2fff3abfa%40%3Ccommits.tomee.apache.org%3E

04 Aug 2024 14:01Current

7.5High risk

Vulners AI Score7.5

EPSS0.24622

CWE-200