GitStock

apache/tomcat · Security

Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request

GHSA ID
GHSA-fjwp-r6fm-q6qw
CVE ID
CVE-2016-8747
Severity
high
Published
Updated
CVSS
7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v3
7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request.

CWEs

  • CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor

References

Open GitHub