Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-2071HistoryJun 01, 2013 - 2:21 p.m.
CVE-2013-2071
2013-06-0114:21:00
Debian Security Bug Tracker
security-tracker.debian.org
10
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | tomcat7 | <Â 7.0.75-1 | tomcat7_7.0.75-1_all.deb |
Related
openvas
openvas
Fedora Update for tomcat FEDORA-2013-7999
2013-05-23 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-191)
2015-09-08 00:00:00
Fedora Update for tomcat FEDORA-2013-7993
2013-05-23 00:00:00
nessus
nessus
Fedora 17 : tomcat-7.0.40-1.fc17 (2013-7999)
2013-05-22 00:00:00
Fedora 19 : tomcat-7.0.40-2.fc19 (2013-7979)
2013-05-26 00:00:00
Amazon Linux AMI : tomcat7 (ALAS-2013-191)
2013-09-04 00:00:00
ubuntucve
ubuntucve
CVE-2013-2071
2013-05-10 00:00:00
prion
prion
Cross site request forgery (csrf)
2013-06-01 14:21:00
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-17 02:44:28
tomcat7 - security update
2014-04-08 00:00:00
seebug
seebug
Apache Tomcat 俥ćŻćłé˛ćźć´(CVE-2013-2071)
2013-05-17 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: tomcat-7.0.40-1.fc17
2013-05-21 08:28:12
[SECURITY] Fedora 18 Update: tomcat-7.0.40-1.fc18
2013-05-21 08:45:56
[SECURITY] Fedora 19 Update: tomcat-7.0.40-2.fc19
2013-05-24 20:43:43
cve
cve
CVE-2013-2071
2013-06-01 14:21:00
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-17 02:44:28
securityvulns
securityvulns
[security bulletin] HPSBMU02966 rev.1 - HP Operations Orchestration, Unauthorized Access to Information
2014-03-03 00:00:00
CVE-2013-2071 Request mix-up if AsyncListener method throws RuntimeException
2013-05-10 00:00:00
Apache Tomcat security vulnerabilities
2013-05-10 00:00:00
mageia
mageia
Updated tomcat7 packages fix CVE-2013-2071
2013-07-01 23:08:10
amazon
amazon
Low: tomcat7
2013-05-24 13:55:00
tomcat
tomcat
Fixed in Apache Tomcat 7.0.40
2013-05-09 00:00:00
atlassian
atlassian
Upgrade bundled Tomcat due to security vulnerabilities
2013-05-21 04:29:40
Upgrade bundled Tomcat due to security vulnerabilities
2013-05-21 04:29:40
Upgrade bundled Tomcat to 6.0.37
2013-05-21 00:23:31
ubuntu
ubuntu
Tomcat vulnerabilities
2013-05-28 00:00:00
debian
debian
[SECURITY] [DSA 2897-1] tomcat7 security update
2014-04-08 18:25:42
redhat
redhat
(RHSA-2013:1011) Moderate: Red Hat JBoss Web Server 2.0.1 update
2013-07-03 00:00:00
(RHSA-2013:1012) Moderate: Red Hat JBoss Web Server 2.0.1 update
2013-07-03 15:40:17
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2014-12-15 00:00:00
oracle
oracle
Oracle Critical Patch Update - January 2014
2014-01-14 00:00:00
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
Related for DEBIANCVE:CVE-2013-2071