GHSA-W7CG-5969-678W Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token

🗓️ 14 May 2022 03:13:01Reported by GoogleType

osv

osv🔗 osv.dev👁 23 Views

Apache Tomcat CSRF bypass issu

Reporter	Title	Published	Views	Family All 145
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect the IBM FlashSystem models 840 and 900	18 Feb 202301:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Tomcat affect IBM SAN Volume Controller and Storwize Family	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2015-5345, CVE-2015-5346, CVE-2015-5351, CVE-2016-0706, CVE-2016-0714, CVE-2016-0763, CVE-2015-5174)	17 Jun 201805:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Tomcat affect IBM UrbanCode Deploy (CVE-2015-5345, CVE-2015-5346, CVE-2015-5351)	17 Jun 201822:33	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Tomcat affects Rational Reporting for Development Intelligence (CVE-2015-5174)	17 Jun 201805:14	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Apache Tomcat affects multiple IBM Rational products based on IBM's Jazz technology (CVE-2015-5345, CVE-2015-5346, CVE-2015-5351, CVE-2016-0706, CVE-2015-5174, others)	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security bulletin: Rational Directory Server (Tivoli) is affected by Apache Tomcat vulnerabilities	17 Jun 201805:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple OpenSource Apache Tomcat vulnerabilities in IBM Algo Audit and Compliance	15 Jun 201822:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in tomcat affect Power Hardware Management Console	23 Sep 202101:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat may affect IBM WebSphere Application Server Community Edition	15 Jun 201807:05	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-5351
access	www.access.redhat.com/errata/RHSA-2016:1087
access	www.access.redhat.com/errata/RHSA-2016:1088
bto	www.bto.bluecoat.com/security-advisory/sa118
github	www.github.com/apache/tomcat
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
lists	www.lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E
security	www.security.gentoo.org/glsa/201705-09

18 Feb 2024 05:22Current

8.5High risk

Vulners AI Score8.5

CVSS 38.8

EPSS0.09212

apache tomcat csrf protection manager application host manager application remote attackers