Lucene search
GoogleOSV:USN-6880-1HistoryJul 09, 2024 - 1:11 a.m.
Tomcat vulnerability
2024-07-0901:11:28
Google
osv.dev
7
tomcat
vulnerability
sam shahsavar
request smuggling
attack
software
http headers
content-length
reverse proxy
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.8
Confidence
High
Sam Shahsavar discovered that Apache Tomcat did not properly reject
HTTP requests with an invalid Content-Length header. A remote attacker
could possibly use this issue to perform HTTP request smuggling attacks.
Related
cnvd
cnvd
Apache Tomcat Environment Issue Vulnerability (CNVD-2022-74082)
2022-11-02 00:00:00
nessus
nessus
Apache Tomcat 10.1.0.M1 < 10.1.1
2022-11-02 00:00:00
Atlassian Confluence 7.19.x < 7.19.16 (CONFSERVER-93168)
2023-11-23 00:00:00
Amazon Linux 2 : tomcat (ALASTOMCAT9-2023-002)
2023-09-27 00:00:00
kaspersky
kaspersky
KLA20032 SB vulnerability in Apache Tomcat
2022-10-07 00:00:00
KLA20034 SB vulnerability in Apache Tomcat
2022-10-10 00:00:00
KLA20033 SB vulnerability in Apache Tomcat
2022-10-11 00:00:00
openvas
openvas
Apache Tomcat Request Smuggling Vulnerability (Oct 2022) - Linux
2022-11-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4303-1)
2022-12-02 00:00:00
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2023-1341)
2023-02-09 00:00:00
ubuntu
ubuntu
Tomcat vulnerability
2024-07-09 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 9.0.68
2022-10-07 00:00:00
Fixed in Apache Tomcat 8.5.83
2022-10-11 00:00:00
Fixed in Apache Tomcat 10.0.27
2022-10-10 00:00:00
cve
cve
CVE-2022-42252
2022-11-01 09:15:10
ubuntucve
ubuntucve
CVE-2022-42252
2022-11-01 00:00:00
freebsd
freebsd
Tomcat -- Request Smuggling
2022-10-31 00:00:00
atlassian
atlassian
osv
osv
CVE-2022-42252
2022-11-01 09:15:10
Apache Tomcat may reject request containing invalid Content-Length header
2022-11-01 12:00:30
BIT-tomcat-2022-42252
2024-03-06 11:09:09
github
github
Apache Tomcat may reject request containing invalid Content-Length header
2022-11-01 12:00:30
redos
redos
ROS-20240715-01
2024-07-15 00:00:00
f5
f5
K000133224 : Apache Tomcat vulnerability CVE-2022-42252
2023-03-28 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in Apache Tomcat affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products
2023-03-29 01:48:02
Security Bulletin: Vulnerability in Apache Tomcat affects IBM Process Mining . CVE-2022-42252
2023-02-01 21:30:29
Security Bulletin: IBM UrbanCode Release is affected by CVE-2022-42252
2023-01-20 16:15:09
veracode
veracode
HTTP Request Smuggling
2022-11-02 05:50:14
nvd
nvd
CVE-2022-42252
2022-11-01 09:15:10
photon
photon
Important Photon OS Security Update - PHSA-2023-0314
2023-01-17 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0314
2023-01-17 00:00:00
Important Photon OS Security Update - PHSA-2023-0518
2023-01-19 00:00:00
debiancve
debiancve
CVE-2022-42252
2022-11-01 09:15:10
prion
prion
Cross site request forgery (csrf)
2022-11-01 09:15:00
redhatcve
redhatcve
CVE-2022-42252
2022-11-09 14:26:30
cvelist
cvelist
CVE-2022-42252 Apache Tomcat request smuggling via malformed content-length
2022-11-01 00:00:00
redhat
redhat
debian
debian
[SECURITY] [DLA 3384-1] tomcat9 security update
2023-04-05 19:47:04
[SECURITY] [DSA 5381-1] tomcat9 security update
2023-04-05 20:07:07
gentoo
gentoo
Apache Tomcat: Multiple Vulnerabilities
2023-05-30 00:00:00
mageia
mageia
Updated tomcat packages fix security vulnerability
2023-04-15 22:03:44
rosalinux
rosalinux
Advisory ROSA-SA-2023-2258
2023-10-21 16:49:43
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.8
Confidence
High
Related for OSV:USN-6880-1