Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-V5P2-VG3C-PMRR
HistoryMay 01, 2022 - 6:33 p.m.

Apache Tomcat Path Traversal Vulnerability

2022-05-0118:33:34
Google
osv.dev
3

6.4 Medium

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

79.8%

JSON

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.

References

Related

cve 2
veracode 1
ubuntucve 2
checkpoint_advisories 1
prion 2
seebug 1
github 1
redhat 7
openvas 29
nessus 31
redhatcve 1
centos 1
oraclelinux 1
debian 2
osv 2
gentoo 1
tomcat 3
fedora 5
altlinux 1
vmware 4
ibm 1
cve
cve
CVE-2007-5461
2007-10-15 18:17:00
CVE-2007-5731
2007-10-30 23:46:00
veracode
veracode
Path Traversal
2018-11-12 08:02:36
ubuntucve
ubuntucve
CVE-2007-5461
2007-10-15 00:00:00
CVE-2007-5731
2007-10-30 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Tomcat WebDav Remote Information Disclosure (CVE-2007-5461)
2013-11-18 00:00:00
prion
prion
Path traversal
2007-10-15 18:17:00
Path traversal
2007-10-30 23:46:00
seebug
seebug
Apache Tomcat WebDavθΏœη¨‹δΏ‘ζ―ζ³„ιœ²ζΌζ΄ž
2007-10-28 00:00:00
github
github
Apache Tomcat Path Traversal Vulnerability
2022-05-01 18:33:34
redhat
redhat
(RHSA-2008:0042) Moderate: tomcat security update
2008-03-11 00:00:00
(RHSA-2008:0195) Moderate: tomcat security update
2008-04-28 00:00:00
(RHSA-2008:0158) Moderate: JBoss Enterprise Application Platform security update
2008-03-24 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2008-0042)
2015-10-08 00:00:00
RedHat Update for tomcat RHSA-2008:0042-01
2009-03-06 00:00:00
RedHat Update for tomcat RHSA-2008:0042-01
2009-03-06 00:00:00
nessus
nessus
Oracle Linux 5 : tomcat (ELSA-2008-0042)
2013-07-12 00:00:00
Scientific Linux Security Update : tomcat on SL5.x i386/x86_64
2012-08-01 00:00:00
RHEL 5 : tomcat (RHSA-2008:0042)
2008-03-13 00:00:00
redhatcve
redhatcve
CVE-2007-5731
2019-10-04 21:11:49
centos
centos
tomcat5 security update
2008-03-19 00:04:06
oraclelinux
oraclelinux
Moderate: tomcat security update
2008-03-11 00:00:00
debian
debian
[SECURITY] [DSA 1453-1] New tomcat5 packages fix several vulnerabilities
2008-01-07 18:41:20
[SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities
2008-01-03 21:54:49
osv
osv
tomcat5 - several vulnerabilities
2008-01-07 00:00:00
tomcat5.5 several vulnerabilities
2008-01-03 00:00:00
gentoo
gentoo
Tomcat: Multiple vulnerabilities
2008-04-10 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 5.5.26
2008-02-05 00:00:00
Fixed in Apache Tomcat 6.0.16
2008-02-08 00:00:00
Fixed in Apache Tomcat 4.1.37
2005-10-06 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: tomcat5-5.5.25-1jpp.1.fc8
2007-11-17 05:37:36
[SECURITY] Fedora 7 Update: tomcat5-5.5.25-1jpp.1.fc7
2007-11-17 05:34:43
[SECURITY] Fedora 7 Update: tomcat5-5.5.26-1jpp.2.fc7
2008-02-13 04:55:03
altlinux
altlinux
Security fix for the ALT Linux 5 package tomcat5 version 0:5.5.25-alt1_1.1jpp5.0
2007-11-30 00:00:00
vmware
vmware
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00
ibm
ibm
Security Bulletin: TADDM affected by multiple vulnerabilities due to Apache Tomcat libraries
2023-01-27 10:54:22

6.4 Medium

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

79.8%

JSON
Related for OSV:GHSA-V5P2-VG3C-PMRR
cve2veracode1ubuntucve2checkpoint_advisories1prion2seebug1github1redhat7openvas29nessus31redhatcve1centos1oraclelinux1debian2osv2gentoo1tomcat3fedora5altlinux1vmware4ibm1