Lucene search

K
nessusTenable700696.PASL
HistoryMay 13, 2019 - 12:00 a.m.

Apache Tomcat 8.5.x < 8.5.34 Open Redirect Weakness

2019-05-1300:00:00
Tenable
www.tenable.com
15

The version of Apache Tomcat installed on the remote host is version 8.5.x prior to 8.5.34. It is, therefore, affected by a vulnerability that could allow a remote attacker to bypass security restrictions, caused by a missing host name verification when using TLS with the WebSocket client. An attacker could exploit this vulnerability to bypass security constraints to access restricted resources.

Binary data 700696.pasl
VendorProductVersionCPE
apachetomcatcpe:/a:apache:tomcat