Lucene search
Apache TomcatTOMCAT:87D3DCDED8DC34AE6079BFCF729C8C46HistoryDec 07, 2017 - 12:00 a.m.
Fixed in Apache Tomcat JK Connector 1.2.43
2017-12-0700:00:00
Apache Tomcat
tomcat.apache.org
14
0.263 Low
EPSS
Percentile
96.7%
Important: Information disclosure CVE-2018-1323
The IIS/ISAPI specific code that normalised the requested path before matching it to the URI-worker map did not handle some edge cases correctly. If only a sub-set of the URLs supported by Tomcat were exposed via IIS, then it was possible for a specially constructed request to expose application functionality through the reverse proxy that was not intended for clients accessing the application via the reverse proxy.
This was fixed in revision 1825658.
Affects: JK 1.2.0-1.2.42
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache tomcat jk connectors | ge | 1.2.0 | |
| apache tomcat jk connectors | le | 1.2.42 |
Related
debiancve
debiancve
CVE-2018-1323
2018-03-12 16:29:00
CVE-2018-11759
2018-10-31 20:29:00
prion
prion
Design/Logic Flaw
2018-03-12 16:29:00
Cross site request forgery (csrf)
2018-10-31 20:29:00
redhatcve
redhatcve
CVE-2018-1323
2018-03-13 06:19:04
CVE-2018-11759
2018-11-02 15:19:10
ubuntucve
ubuntucve
CVE-2018-1323
2018-03-12 00:00:00
CVE-2018-11759
2018-10-31 00:00:00
cve
cve
CVE-2018-1323
2018-03-12 16:29:00
CVE-2018-11759
2018-10-31 20:29:00
redhat
redhat
cvelist
cvelist
CVE-2018-1323
2018-03-12 00:00:00
CVE-2018-11759
2018-10-31 20:00:00
openvas
openvas
tomcat
tomcat
Fixed in Apache Tomcat JK Connector 1.2.46
2018-06-05 00:00:00
nessus
nessus
nuclei
nuclei
Apache Tomcat JK Connect <=1.2.44 - Manager Access
2020-07-06 16:28:42
f5
f5
K38108582 : Apache Tomcat vulnerability CVE-2018-11759
2018-11-09 00:00:00
