Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

GHSA-FJWP-R6FM-Q6QW Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request

🗓️ 14 May 2022 01:10:15Reported by GoogleType 
osv
 osv🔗 osv.dev👁 13 Views

Apache Tomcat information disclosure issue in reverse-proxy configuration

Related
Refs
ReporterTitlePublishedViews
Family
Tenable Nessus		Apache Tomcat 8.5.7 < 8.5.11 / 9.0.0.M11 < 9.0.0.M17 nextRequest Information Disclosure
17 Mar 201700:00
–nessus
Tenable Nessus		Photon OS 1.0: Apache PHSA-2017-0012 (deprecated)
17 Aug 201800:00
–nessus
Tenable Nessus		Photon OS 1.0: Apache PHSA-2017-0012
23 Jul 202400:00
–nessus
Tenable Nessus		Apache Tomcat 8.5.7 < 8.5.11
13 Apr 201700:00
–nessus
Tenable Nessus		Apache Tomcat 9.0.0.M11 < 9.0.0.M17
13 Apr 201700:00
–nessus
CNVD		Apache Tomcat Information Disclosure Vulnerability (CNVD-2017-04115)
16 Mar 201700:00
–cnvd
CVE		CVE-2016-8747
14 Mar 201709:02
–cve
Cvelist		CVE-2016-8747
14 Mar 201709:02
–cvelist
Debian CVE		CVE-2016-8747
14 Mar 201709:02
–debiancve
EUVD		EUVD-2022-3801
3 Oct 202520:07
–euvd
Rows per page
SourceLink
nvdwww.nvd.nist.gov/vuln/detail/CVE-2016-8747
githubwww.github.com/apache/tomcat/commit/452c8094a665ef6375530e81c033da4eeb2e4865
githubwww.github.com/apache/tomcat/commit/9601a937ff3b7ef5d04b2a0e950d0e44e1bb4cbd
webwww.web.archive.org/web/20200227183332/http://www.securityfocus.com/bid/96895
securitywww.security.netapp.com/advisory/ntap-20180614-0002
listswww.lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E
listswww.lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
listswww.lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E
listswww.lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E
listswww.lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
15 Oct 2024 23:42Current
7High risk
Vulners AI Score7
CVSS 37.5
EPSS0.07179
apache tomcatinformation disclosurereverse-proxy
13