Lucene search
Veracode Vulnerability DatabaseVERACODE:7782HistoryNov 14, 2018 - 1:04 a.m.
Information Disclosure
2018-11-1401:04:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
43.5%
Apache Tomcat HTTP/1.1 connector is vulnerable to information disclosure. A lack of validation in the URL allows remote attackers to inject NULL bytes and retrieve confidential information through reading of JSP source files when allowLinking is configured.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tomcat:tomcat4-coyote | le | 4.1.36 | |
| tomcat-coyote | le | 4.1.36 | |
| catalina | le | 4.1.36 |
References
Related
nvd
nvd
CVE-2005-4836
2005-12-31 05:00:00
cvelist
cvelist
CVE-2005-4836
2007-05-09 22:00:00
osv
osv
Apache Tomcat allows remote attackers to read JSP source files
2022-05-01 02:31:23
github
github
Apache Tomcat allows remote attackers to read JSP source files
2022-05-01 02:31:23
cve
cve
CVE-2005-4836
2007-05-09 22:00:00
ubuntucve
ubuntucve
CVE-2005-4836
2005-12-31 00:00:00
ibm
ibm