Lucene search
This script is Copyright (C) 2018-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_112290HistoryNov 05, 2018 - 12:00 a.m.
Apache Tomcat 9.0.0.M1 < 9.0.10 Multiple Vulnerabilities
2018-11-0500:00:00
This script is Copyright (C) 2018-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
5
The version of Apache Tomcat installed on the remote host is 9.0.x prior to 9.0.10. It is, therefore, affected by multiple vulnerabilities :
-
A flaw exists in WebSocket client because host name verification is missing
-
A flaw exists in NIO/NIO2 connectors due to a mishandling of close that can lead to reuse of user sessions
-
A flaw exists in CORS filter due to insecure defaults
Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.
No source data