Lucene search

[email protected]CVE-2023-28708

HistoryMar 22, 2023 - 11:15 a.m.

CVE-2023-28708

2023-03-2211:15:10

CWE-523

[email protected]

web.nvd.nist.gov

226

cve-2023-28708

apache tomcat

session cookies

secure attribute

http

reverse proxy

x-forwarded-proto

nvd

information security

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.1%

JSON

When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel.

Affected configurations

Vulners

NVD

Node

apachetomcatRange≤11.0.0-M2

apachetomcatRange≤10.1.5

apachetomcatRange≤9.0.71

apachetomcatRange≤8.5.85

CPENameOperatorVersion
apache:tomcatapache tomcatlt8.5.86
apache:tomcatapache tomcatlt9.0.72
apache:tomcatapache tomcatlt10.1.6
apache:tomcatapache tomcateq11.0.0

CPE	Name	Operator	Version
apache:tomcat	apache tomcat	lt	8.5.86
apache:tomcat	apache tomcat	lt	9.0.72
apache:tomcat	apache tomcat	lt	10.1.6
apache:tomcat	apache tomcat	eq	11.0.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Tomcat",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "11.0.0-M2",
        "status": "affected",
        "version": "11.0.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "10.1.5",
        "status": "affected",
        "version": "10.1.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.0.71",
        "status": "affected",
        "version": "9.0.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "8.5.85",
        "status": "affected",
        "version": "8.5.0",
        "versionType": "semver"
      }
    ]
  }
]