Apache Tomcat 8.5.x < 8.5.28 Security Constraint Weakness

2019-05-1300:00:00

Tenable

www.tenable.com

JSON

The version of Apache Tomcat installed on the remote host is version 8.5.x prior to 8.5.28. It is, therefore, affected by a security constraints flaw which could expose resources to unauthorized users.

Binary data 700693.pasl

VendorProductVersionCPE
apachetomcatcpe:/a:apache:tomcat

Vendor	Product	Version	CPE
apache	tomcat		cpe:/a:apache:tomcat

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1304

tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.28

JSON