7330 matches found
CVE-2012-4431
org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery CSRF protection mechanism via a request that lacks a session identifier...
CVE-2012-3546
org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /jsecuritycheck at the end of a URI...
CVE-2012-4534
org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service infinite loop by terminating the connection during the reading of a...
Apache Tomcat 7.0.x < 7.0.32 CSRF Filter Bypass
Binary data 800622.prm...
Apache Tomcat 7.0.x < 7.0.32 CSRF Filter Bypass
Binary data 6644.pasl...
Apache Tomcat 7.0.0 < 7.0.32
The version of Tomcat installed on the remote host is prior to 7.0.32. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat7.0.32security-7 advisory. - org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32...
CVE-2012-4431 Apache Tomcat Bypass of CSRF prevention filter
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2012-4431 Apache Tomcat Bypass of CSRF prevention filter Severity: Important Vendor: The Apache Software Foundation Versions Affected: - - Tomcat 7.0.0 to 7.0.31 - - Tomcat 6.0.0 to 6.0.35 Description: The CSRF prevention filter could be bypassed ...
CVE-2012-4534 Apache Tomcat denial of service
CVE-2012-4534 Apache Tomcat denial of service Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Tomcat 7.0.0 to 7.0.27 - Tomcat 6.0.0 to 6.0.35 Description: When using the NIO connector with sendfile and HTTPS enabled, if a client breaks the connection while reading...
CVE-2012-3546 Apache Tomcat Bypass of security constraints
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2012-3546 Apache Tomcat Bypass of security constraints Severity: Important Vendor: The Apache Software Foundation Versions Affected: - - Tomcat 7.0.0 to 7.0.29 - - Tomcat 6.0.0 to 6.0.35 Earlier unsupported versions may also be affected Descriptio...
Apache Tomcat 跨站请求伪造漏洞
BUGTRAQ ID: 56814 CVECAN ID: CVE-2012-4431 Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。 Tomcat v7.0.31、6.0.35之前版本在实现上存在跨站请求伪造漏洞，远程攻击者可利用此漏洞当前用户权限执行某些操作，访问受影响应用程序。 0 Apache Group Tomcat 7.0.0 - 7.0.29 Apache Group Tomcat 6.0.0 - 6.0.35 厂商补丁： Apache Group ------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载更高版本。...
Apache Tomcat FORM身份验证安全绕过漏洞
BUGTRAQ ID: 56812 CVECAN ID: CVE-2012-3546 Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。 Tomcat v7.0.30、6.0.36之前版本在FORM身份验证的实现上存在安全漏洞。在使用FORM验证时，若其他组件（如Single-Sign-On）在调用FormAuthenticatorauthenticate之前调用了request.setUserPrincipal，则攻击者可以通过在URL结尾添加"/jsecuritycheck"以绕过FORM验证 0 Apache Group Tomcat 7.0.0 - 7.0.2...
Apache Tomcat multiple security vulnerabilities
Protection bypass, DoS...
Apache Tomcat Multiple Critical Vulnerabilities
Some critical vulnerabilities have been reported in Apache Tomcat, which can be exploited by malicious people to bypass certain security restrictions and cause a DoS Denial of Service attack. These vulnerabilities affect Apache Tomcat 6.x and Apache Tomcat 7.x . Apache Tomcat vulnerabilities...
Apache Tomcat Multiple Critical Vulnerabilities
Some critical vulnerabilities have been reported in Apache Tomcat, which can be exploited by malicious people to bypass certain security restrictions and cause a DoS Denial of Service attack. These vulnerabilities affect Apache Tomcat 6.x and Apache Tomcat 7.x . Apache Tomcat vulnerabilities...
Apache Tomcat Partial HTTP Requests DoS Vulnerability - Windows
Apache Tomcat Server is prone to a denial of service DoS vulnerability. This VT has been deprecated for the reasons explained by the Apache Tomcat team in the references. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...
CVE-2012-5568
Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service daemon outage via partial HTTP requests, as demonstrated by Slowloris...
Design/Logic Flaw
Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service daemon outage via partial HTTP requests, as demonstrated by Slowloris...
CVE-2012-5568
Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service daemon outage via partial HTTP requests, as demonstrated by Slowloris...
