Apache Tomcat 9.0.x < 9.0.0.M21 Remote Error Page Manipulation

2019-05-1300:00:00

Tenable

www.tenable.com

According to its self-reported version number, the Apache Tomcat service running on the remote host is 9.0.x prior to 9.0.0.M21.

Binary data 700701.pasl

VendorProductVersionCPE
apachetomcatcpe:/a:apache:tomcat

Vendor	Product	Version	CPE
apache	tomcat		cpe:/a:apache:tomcat

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5664

tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.0.M21