Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2010-1157
HistoryApr 23, 2010 - 2:00 p.m.

CVE-2010-1157

2010-04-2314:00:00
redhat
www.cve.org
4

4.5 Medium

AI Score

Confidence

High

0.154 Low

EPSS

Percentile

95.9%

JSON

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the serverโ€™s hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.

References

Related

securityvulns 4
nvd 1
seebug 3
prion 1
nessus 23
openvas 18
osv 1
cve 1
exploitpack 1
freebsd 1
github 1
ubuntucve 1
exploitdb 1
tomcat 2
redhat 2
debian 1
gentoo 1
ibm 1
securityvulns
securityvulns
[SECURITY] CVE-2010-1157: Apache Tomcat information disclosure vulnerability
2010-04-23 00:00:00
Apache Tomcat information leak
2010-04-23 00:00:00
Apple OS X multiple security vulnerabilities
2011-10-24 00:00:00
nvd
nvd
CVE-2010-1157
2010-04-23 14:30:01
seebug
seebug
Apache Tomcat v. 5.5.0 to 5.5.29 & 6.0.0 to 6.0.26 information disclosure vulnerability
2010-04-23 00:00:00
Apache Tomcat่ฎค่ฏๅคดไฟกๆฏๆณ„้œฒๆผๆดž
2010-04-26 00:00:00
Apache Tomcat 5.5.0 to 5.5.29 & 6.0.0 to 6.0.26 - Information Disclosure Vulnerability
2014-07-01 00:00:00
prion
prion
Authentication flaw
2010-04-23 14:30:00
nessus
nessus
FreeBSD : tomcat -- information disclosure vulnerability (3383e706-4fc3-11df-83fb-0015587e2cc1)
2010-04-26 00:00:00
openSUSE Security Update : tomcat6 (openSUSE-SU-2010:0616-1)
2010-09-16 00:00:00
Apache Tomcat 6.0.x < 6.0.28 Multiple Vulnerabilities
2011-02-11 00:00:00
openvas
openvas
Apache Tomcat Security bypass vulnerability
2010-04-29 00:00:00
FreeBSD Ports: tomcat
2010-05-04 00:00:00
FreeBSD Ports: tomcat
2010-05-04 00:00:00
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 06:19:37
cve
cve
CVE-2010-1157
2010-04-23 14:30:01
exploitpack
exploitpack
Apache Tomcat 5.5.0 5.5.29 6.0.0 6.0.26 - Information Disclosure
2010-04-22 00:00:00
freebsd
freebsd
tomcat -- information disclosure vulnerability
2010-04-22 00:00:00
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 06:19:37
ubuntucve
ubuntucve
CVE-2010-1157
2010-04-23 00:00:00
exploitdb
exploitdb
Apache Tomcat 5.5.0 &lt; 5.5.29 / 6.0.0 &lt; 6.0.26 - Information Disclosure
2010-04-22 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 6.0.28
2010-07-09 00:00:00
Fixed in Apache Tomcat 5.5.30
2010-07-09 00:00:00
redhat
redhat
(RHSA-2010:0584) Important: jbossweb security update
2010-08-02 00:00:00
(RHSA-2011:0897) Moderate: JBoss Enterprise Web Server 1.0.2 update
2011-06-22 00:00:00
debian
debian
[SECURITY] [DSA 2207-1] tomcat5.5 security update
2011-03-29 22:35:34
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
ibm
ibm
Security Bulletin: Apache Log4j Vulnerabilities Affect IBM Sterling B2B Integrator
2021-10-06 14:56:49

4.5 Medium

AI Score

Confidence

High

0.154 Low

EPSS

Percentile

95.9%

JSON
Related for CVELIST:CVE-2010-1157
securityvulns4nvd1seebug3prion1nessus23openvas18osv1cve1exploitpack1freebsd1github1ubuntucve1exploitdb1tomcat2redhat2debian1gentoo1ibm1