Lucene search
PRIOn knowledge basePRION:CVE-2023-34981HistoryJun 21, 2023 - 11:15 a.m.
Design/Logic Flaw
2023-06-2111:15:00
PRIOn knowledge base
www.prio-n.com
5
apache tomcat
regression
information leak
bug 66512
logic flaw
nvd
A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response did not include any HTTP headers no AJP SEND_HEADERS messare woudl be sent for the response which in turn meant that at least one AJP proxy (mod_proxy_ajp) would use the response headers from the previous request leading to an information leak.
Related
tomcat
tomcat
Fixed in Apache Tomcat 8.5.89
2023-05-19 00:00:00
Fixed in Apache Tomcat 10.1.9
2023-05-19 00:00:00
Fixed in Apache Tomcat 11.0.0-M6
2023-05-09 00:00:00
osv
osv
Apache Tomcat vulnerable to information leak
2023-06-21 12:30:19
BIT-tomcat-2023-34981
2024-03-06 11:08:35
CVE-2023-34981
2023-06-21 11:15:09
ubuntucve
ubuntucve
CVE-2023-34981
2023-06-21 00:00:00
openvas
openvas
Apache Tomcat Information Disclosure Vulnerability (Jun 2023) - Linux
2023-06-22 00:00:00
Apache Tomcat Information Disclosure Vulnerability (Jun 2023) - Windows
2023-06-22 00:00:00
nessus
nessus
Apache Tomcat 8.5.0 < 8.5.89
2023-06-21 00:00:00
Apache Tomcat 10.1.0 < 10.1.9
2023-06-21 00:00:00
Apache Tomcat 9.0.0 < 9.0.75
2023-06-21 00:00:00
ibm
ibm
f5
f5
K000135223 : Apache Tomcat vulnerability CVE-2023-34981
2023-06-26 00:00:00
nvd
nvd
CVE-2023-34981
2023-06-21 11:15:09
redhatcve
redhatcve
CVE-2023-34981
2023-06-23 10:17:08
redos
redos
ROS-20240410-01
2024-04-10 00:00:00
debiancve
debiancve
CVE-2023-34981
2023-06-21 11:15:09
kaspersky
kaspersky
KLA50475 OSI vulnerability in Apache Tomcat
2023-05-10 00:00:00
KLA50474 OSI vulnerability in Apache Tomcat
2023-05-19 00:00:00
veracode
veracode
Information Disclosure
2023-06-29 03:14:04
cvelist
cvelist
CVE-2023-34981 Apache Tomcat: AJP response header mix-up
2023-06-21 10:26:16
github
github
Apache Tomcat vulnerable to information leak
2023-06-21 12:30:19
cve
cve
CVE-2023-34981
2023-06-21 11:15:09
atlassian
atlassian
Upgrade Tomcat to fix CVE-2023-28709
2023-06-06 02:52:01
Upgrade Tomcat to fix CVE-2023-34981
2023-06-26 07:32:46
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0466
2023-09-07 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0093
2023-09-13 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00