CVE-2020-17527-Tomcat

CVE-2020-17527-Tomcat...

Linux Distros Unpatched Vulnerability : CVE-2020-17527

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request...

CVE-2020-17527 affecting package tomcat for versions less than 9.0.39-5

CVE-2020-17527 affecting package tomcat for versions less than 9.0.39-5. No patch is available currently...

CVE-2020-17527 affecting package tomcat for versions less than 9.0.39-5

CVE-2020-17527 affecting package tomcat for versions less than 9.0.39-5. No patch is available currently...

Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-010)

The version of tomcat installed on the remote host is prior to 8.5.60-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2TOMCAT8.5-2023-010 advisory. While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and...

K44415301: Apache Tomcat vulnerability CVE-2020-17527

Security Advisory Description While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the...

Ubuntu: Security Advisory (USN-5360-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

com.github.waffle:waffle-tomcat10 (2.3.0), org.apache.tomcat:tomcat-catalina (>=10.0.0-m1, <=10.0.0-m9) +6 more potentially affected by CVE-2020-17527 via org.apache.tomcat:tomcat-coyote (>=10.0.0-m1, <=10.0.0-m9)

org.apache.tomcat:tomcat-coyote MAVEN version =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =0.8.0, =3.0.0-m2, =10.0.0.beta1, =10.0.0.beta1, =11.0.0.final Source cves: CVE-2020-17527 Source advisory: GHSA-VVW4-RFWF-P6HX...

com.addc:addc-svr-tomcat (>=2.5, <=2.9), com.cloudera.oryx:oryx-lambda-serving (>=2.3.0, <=2.5.0) +115 more potentially affected by CVE-2020-17527 via org.apache.tomcat:tomcat-coyote (>=8.5.0, <=8.5.59)

org.apache.tomcat:tomcat-coyote MAVEN version =8.5.0, =2.5, =2.3.0, =1.0.0, =1.6.1, =1.0.0, =1.0.4, =3.0.0.rc2, =3.0.0.rc2, =1.8.2, =2.1, =1.0.0, =0.0.4, =0.1.0 and more Source cves: CVE-2020-17527 Source advisory: GHSA-VVW4-RFWF-P6HX...

com.atomgraph:linkeddatahub (>=2.0.0, <=3.0.5), com.cloudera.oryx:oryx-lambda-serving (>=2.6.0, <=2.8.0) +124 more potentially affected by CVE-2020-17527 via org.apache.tomcat:tomcat-coyote (>=9.0.0.m1, <=9.0.39)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.0.m1, =2.0.0, =2.6.0, =3.2.1036, =1.3.1, =3.1.0, =3.0.0.rc2, =1.8.2, =2.1, =y, =1.0-alpha-1, =1.0-alpha-2 and more Source cves: CVE-2020-17527 Source advisory: OSV:GHSA-VVW4-RFWF-P6HX...

Security Bulletin: IBM UrbanCode Release is affected by CVE-2020-17527

Summary IBM UrbanCode Release version 6.2.2.7 - 6.2.5.2 are affected by CVE-2020-17527 Vulnerability Details CVEID: CVE-2020-17527 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by an issue when the HTTP request header value can be reused from the...

Apache Tomcat 10.0.0.M1 < 10.0.0.M10 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.0.0.M10. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.0.0-m10security-10 advisory. - When serving resources from a network location using the NTFS file system, Apache Tomcat...

SUSE: Security Advisory (SUSE-SU-2021:0041-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:0042-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Database Server Multiple Vulnerabilities (Apr 2021 CPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2021 CPU advisory. - Vulnerability in the Oracle Database - Enterprise Edition Security Dell BSAFE Micro Edition Suite component of Oracle Database Server...

SUSE: Security Advisory (SUSE-SU-2021:0031-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:0040-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for tomcat (openSUSE-SU-2021:0081-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for tomcat (openSUSE-SU-2021:0043-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Photon OS 4.0: Apache PHSA-2021-4.0-0007

An update of the apache package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0007. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148353;...