Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-V5P2-VG3C-PMRR
HistoryMay 01, 2022 - 6:33 p.m.

Apache Tomcat Path Traversal Vulnerability

2022-05-0118:33:34
CWE-22
GitHub Advisory Database
github.com
26

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

79.6%

JSON

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.

References

Related

cve 2
checkpoint_advisories 1
prion 2
seebug 1
osv 3
veracode 1
ubuntucve 2
redhat 7
openvas 29
nessus 31
redhatcve 1
centos 1
oraclelinux 1
debian 2
gentoo 1
tomcat 3
fedora 5
altlinux 1
vmware 4
ibm 1
cve
cve
CVE-2007-5461
2007-10-15 18:17:00
CVE-2007-5731
2007-10-30 23:46:00
checkpoint_advisories
checkpoint_advisories
Apache Tomcat WebDav Remote Information Disclosure (CVE-2007-5461)
2013-11-18 00:00:00
prion
prion
Path traversal
2007-10-15 18:17:00
Path traversal
2007-10-30 23:46:00
seebug
seebug
Apache Tomcat WebDavθΏœη¨‹δΏ‘ζ―ζ³„ιœ²ζΌζ΄ž
2007-10-28 00:00:00
osv
osv
Apache Tomcat Path Traversal Vulnerability
2022-05-01 18:33:34
tomcat5 - several vulnerabilities
2008-01-07 00:00:00
tomcat5.5 several vulnerabilities
2008-01-03 00:00:00
veracode
veracode
Path Traversal
2018-11-12 08:02:36
ubuntucve
ubuntucve
CVE-2007-5461
2007-10-15 00:00:00
CVE-2007-5731
2007-10-30 00:00:00
redhat
redhat
(RHSA-2008:0042) Moderate: tomcat security update
2008-03-11 00:00:00
(RHSA-2008:0195) Moderate: tomcat security update
2008-04-28 00:00:00
(RHSA-2008:0158) Moderate: JBoss Enterprise Application Platform security update
2008-03-24 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2008-0042)
2015-10-08 00:00:00
RedHat Update for tomcat RHSA-2008:0042-01
2009-03-06 00:00:00
RedHat Update for tomcat RHSA-2008:0042-01
2009-03-06 00:00:00
nessus
nessus
Scientific Linux Security Update : tomcat on SL5.x i386/x86_64
2012-08-01 00:00:00
RHEL 5 : tomcat (RHSA-2008:0042)
2008-03-13 00:00:00
Oracle Linux 5 : tomcat (ELSA-2008-0042)
2013-07-12 00:00:00
redhatcve
redhatcve
CVE-2007-5731
2019-10-04 21:11:49
centos
centos
tomcat5 security update
2008-03-19 00:04:06
oraclelinux
oraclelinux
Moderate: tomcat security update
2008-03-11 00:00:00
debian
debian
[SECURITY] [DSA 1453-1] New tomcat5 packages fix several vulnerabilities
2008-01-07 18:41:20
[SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities
2008-01-03 21:54:49
gentoo
gentoo
Tomcat: Multiple vulnerabilities
2008-04-10 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 5.5.26
2008-02-05 00:00:00
Fixed in Apache Tomcat 6.0.16
2008-02-08 00:00:00
Fixed in Apache Tomcat 4.1.37
2005-10-06 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: tomcat5-5.5.25-1jpp.1.fc8
2007-11-17 05:37:36
[SECURITY] Fedora 7 Update: tomcat5-5.5.25-1jpp.1.fc7
2007-11-17 05:34:43
[SECURITY] Fedora 7 Update: tomcat5-5.5.26-1jpp.2.fc7
2008-02-13 04:55:03
altlinux
altlinux
Security fix for the ALT Linux 5 package tomcat5 version 0:5.5.25-alt1_1.1jpp5.0
2007-11-30 00:00:00
vmware
vmware
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
2009-11-20 00:00:00
ibm
ibm
Security Bulletin: TADDM affected by multiple vulnerabilities due to Apache Tomcat libraries
2023-01-27 10:54:22

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

79.6%

JSON
Related for GHSA-V5P2-VG3C-PMRR
cve2checkpoint_advisories1prion2seebug1osv3veracode1ubuntucve2redhat7openvas29nessus31redhatcve1centos1oraclelinux1debian2gentoo1tomcat3fedora5altlinux1vmware4ibm1