Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3656
HistoryMar 14, 2017 - 5:52 a.m.

Information Disclosure

2017-03-1405:52:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.002

Percentile

56.5%

tomcat-coyote is vulnerable to information disclosure. The vulnerability is caused due to a regression introduced by a refactoring to widen the use of bytebuffer. Due to the flaw, when running behind a reverse proxy, the information leaks between requests on the same connection. All HTTP connector variants are affected but HTTP/2 and AJP are not affected.