Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-W6Q7-WW2X-7GM3
HistoryMay 02, 2022 - 6:19 a.m.

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

2022-05-0206:19:37
CWE-200
GitHub Advisory Database
github.com
6

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.154 Low

EPSS

Percentile

95.8%

JSON

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the serverโ€™s hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.

References

Related

exploitpack 1
openvas 18
nessus 20
osv 1
cve 1
securityvulns 4
prion 1
seebug 3
freebsd 1
ubuntucve 1
exploitdb 1
tomcat 2
redhat 2
debian 1
gentoo 1
ibm 1
exploitpack
exploitpack
Apache Tomcat 5.5.0 5.5.29 6.0.0 6.0.26 - Information Disclosure
2010-04-22 00:00:00
openvas
openvas
Apache Tomcat Security bypass vulnerability
2010-04-29 00:00:00
FreeBSD Ports: tomcat
2010-05-04 00:00:00
FreeBSD Ports: tomcat
2010-05-04 00:00:00
nessus
nessus
FreeBSD : tomcat -- information disclosure vulnerability (3383e706-4fc3-11df-83fb-0015587e2cc1)
2010-04-26 00:00:00
openSUSE Security Update : tomcat6 (openSUSE-SU-2010:0616-1)
2014-06-13 00:00:00
SuSE9 Security Update : Tomcat (YOU Patch Number 12625)
2010-09-16 00:00:00
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 06:19:37
cve
cve
CVE-2010-1157
2010-04-23 14:30:00
securityvulns
securityvulns
[SECURITY] CVE-2010-1157: Apache Tomcat information disclosure vulnerability
2010-04-23 00:00:00
Apache Tomcat information leak
2010-04-23 00:00:00
Apple OS X multiple security vulnerabilities
2011-10-24 00:00:00
prion
prion
Authentication flaw
2010-04-23 14:30:00
seebug
seebug
Apache Tomcat v. 5.5.0 to 5.5.29 & 6.0.0 to 6.0.26 information disclosure vulnerability
2010-04-23 00:00:00
Apache Tomcat 5.5.0 to 5.5.29 & 6.0.0 to 6.0.26 - Information Disclosure Vulnerability
2014-07-01 00:00:00
Apache Tomcat่ฎค่ฏๅคดไฟกๆฏๆณ„้œฒๆผๆดž
2010-04-26 00:00:00
freebsd
freebsd
tomcat -- information disclosure vulnerability
2010-04-22 00:00:00
ubuntucve
ubuntucve
CVE-2010-1157
2010-04-23 00:00:00
exploitdb
exploitdb
Apache Tomcat 5.5.0 < 5.5.29 / 6.0.0 < 6.0.26 - Information Disclosure
2010-04-22 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 6.0.28
2010-07-09 00:00:00
Fixed in Apache Tomcat 5.5.30
2010-07-09 00:00:00
redhat
redhat
(RHSA-2010:0584) Important: jbossweb security update
2010-08-02 00:00:00
(RHSA-2011:0897) Moderate: JBoss Enterprise Web Server 1.0.2 update
2011-06-22 00:00:00
debian
debian
[SECURITY] [DSA 2207-1] tomcat5.5 security update
2011-03-29 22:35:34
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
ibm
ibm
Security Bulletin: Apache Log4j Vulnerabilities Affect IBM Sterling B2B Integrator
2021-10-06 14:56:49

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.154 Low

EPSS

Percentile

95.8%

JSON
Related for GHSA-W6Q7-WW2X-7GM3
exploitpack1openvas18nessus20osv1cve1securityvulns4prion1seebug3freebsd1ubuntucve1exploitdb1tomcat2redhat2debian1gentoo1ibm1