Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2016-8747
HistoryMar 14, 2017 - 9:59 a.m.

CVE-2016-8747

2017-03-1409:59:00
Debian Security Bug Tracker
security-tracker.debian.org
12

0.002 Low

EPSS

Percentile

56.5%

An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request.

OSVersionArchitecturePackageVersionFilename
Debian9alltomcat8< 8.5.54-0+deb9u1tomcat8_8.5.54-0+deb9u1_all.deb