Access Control Bypass

Overview org.apache.tomcat:tomcat-coyote is a Tomcat Connectors and HTTP parser. Affected versions of this package are vulnerable to Access Control Bypass in the HTTP/2 asynchronous servlet processing. An attacker can cause requests and responses to be mixed up between users by exploiting incorre...

Access Control Bypass

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Access Control Bypass in the HTTP/2 asynchronous servlet processing. An attacker can cause requests and responses to be mixed up between users by exploiting...

CA Unified Infrastructure Management get_sessions Session Information Disclosure Remote Authentication Bypass Vulnerability

This vulnerability allows remote attackers to disclose session information on vulnerable installations of CA Unified Infrastructure Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the getsessions servlet. The servlet can retu...