Lucene search
RootSSV:20364HistoryMar 14, 2011 - 12:00 a.m.
Apache Tomcat "@ServletSecurity" 注释安全限制绕过漏洞
2011-03-1400:00:00
Root
www.seebug.org
28
0.002 Low
EPSS
Percentile
57.2%
CVE ID: CVE-2011-1088
Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。
Apache Tomcat在实现上存在"@ServletSecurity" 注释安全限制绕过漏洞，远程攻击者可利用此漏洞绕过某些安全限制。
由于应用程序在加载小服务程序时未能正确执行"@ServletSecurity" 注释，可通过绕过注释指定的安全限制并泄露某些信息。
Apache Group Tomcat 7.x
厂商补丁：
Apache Group
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
prion
prion
Design/Logic Flaw
2011-03-14 19:55:00
Design/Logic Flaw
2011-03-14 19:55:00
Design/Logic Flaw
2011-04-08 15:17:00
tomcat
tomcat
Fixed in Apache Tomcat 7.0.11
2011-03-11 00:00:00
Fixed in Apache Tomcat 7.0.14
2011-05-12 00:00:00
Fixed in Apache Tomcat 7.0.12
2011-04-06 00:00:00
github
github
Apache Tomcat allows remote attackers to bypass intended access restrictions
2022-05-14 02:56:11
Apache Tomcat does not follow ServletSecurity annotations
2022-05-17 02:00:34
Access controll bypass in Apache Tomcat
2022-05-14 02:56:10
securityvulns
securityvulns
[SECURITY] CVE-2011-1088 Apache Tomcat security constraint bypass
2011-03-15 00:00:00
[SECURITY] CVE-2011-1582 Apache Tomcat security constraint bypass
2011-05-17 00:00:00
Apache Tomcat protection bypass
2011-05-17 00:00:00
cve
cve
osv
osv
Apache Tomcat allows remote attackers to bypass intended access restrictions
2022-05-14 02:56:11
Apache Tomcat does not follow ServletSecurity annotations
2022-05-17 02:00:34
Access controll bypass in Apache Tomcat
2022-05-14 02:56:10
openvas
openvas
Apache Tomcat 'ServletSecurity' Annotations Security Bypass Vulnerability - Linux
2017-12-12 00:00:00
Apache Tomcat 'ServletSecurity' Annotations Security Bypass Vulnerability - Windows
2017-12-12 00:00:00
Gentoo Security Advisory GLSA 201206-24 (apache tomcat)
2012-08-10 00:00:00
nessus
nessus
Apache Tomcat 7.x < 7.0.11 @ServletSecurity Annotation Security Bypass
2011-03-11 00:00:00
Apache Tomcat 7.0.12 / 7.0.13 Security Constraint Bypass
2011-05-18 00:00:00
Apache Tomcat 7.0.x < 7.0.12 Multiple Vulnerabilities
2011-04-07 00:00:00
ubuntucve
ubuntucve
CVE-2011-1183
2011-04-08 00:00:00
CVE-2011-1582
2011-05-20 00:00:00
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00