Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-W6Q7-WW2X-7GM3
HistoryMay 02, 2022 - 6:19 a.m.

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

2022-05-0206:19:37
CWE-200
GitHub Advisory Database
github.com
7

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.154 Low

EPSS

Percentile

95.9%

JSON

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the serverโ€™s hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.

Affected configurations

Vulners
Node
org.apache.tomcat\Matchtomcat
OR
org.apache.tomcat\Matchtomcat

References

Related

nessus 23
openvas 18
osv 1
cve 1
exploitpack 1
securityvulns 4
nvd 1
seebug 3
prion 1
freebsd 1
cvelist 1
ubuntucve 1
exploitdb 1
tomcat 2
redhat 2
debian 1
gentoo 1
ibm 1
nessus
nessus
FreeBSD : tomcat -- information disclosure vulnerability (3383e706-4fc3-11df-83fb-0015587e2cc1)
2010-04-26 00:00:00
openSUSE Security Update : tomcat6 (openSUSE-SU-2010:0616-1)
2010-09-16 00:00:00
Apache Tomcat 6.0.x < 6.0.28 Multiple Vulnerabilities
2011-02-11 00:00:00
openvas
openvas
Apache Tomcat Security bypass vulnerability
2010-04-29 00:00:00
FreeBSD Ports: tomcat
2010-05-04 00:00:00
FreeBSD Ports: tomcat
2010-05-04 00:00:00
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 06:19:37
cve
cve
CVE-2010-1157
2010-04-23 14:30:01
exploitpack
exploitpack
Apache Tomcat 5.5.0 5.5.29 6.0.0 6.0.26 - Information Disclosure
2010-04-22 00:00:00
securityvulns
securityvulns
[SECURITY] CVE-2010-1157: Apache Tomcat information disclosure vulnerability
2010-04-23 00:00:00
Apache Tomcat information leak
2010-04-23 00:00:00
Apple OS X multiple security vulnerabilities
2011-10-24 00:00:00
nvd
nvd
CVE-2010-1157
2010-04-23 14:30:01
seebug
seebug
Apache Tomcat v. 5.5.0 to 5.5.29 &amp; 6.0.0 to 6.0.26 information disclosure vulnerability
2010-04-23 00:00:00
Apache Tomcat่ฎค่ฏๅคดไฟกๆฏๆณ„้œฒๆผๆดž
2010-04-26 00:00:00
Apache Tomcat 5.5.0 to 5.5.29 & 6.0.0 to 6.0.26 - Information Disclosure Vulnerability
2014-07-01 00:00:00
prion
prion
Authentication flaw
2010-04-23 14:30:00
freebsd
freebsd
tomcat -- information disclosure vulnerability
2010-04-22 00:00:00
cvelist
cvelist
CVE-2010-1157
2010-04-23 14:00:00
ubuntucve
ubuntucve
CVE-2010-1157
2010-04-23 00:00:00
exploitdb
exploitdb
Apache Tomcat 5.5.0 &lt; 5.5.29 / 6.0.0 &lt; 6.0.26 - Information Disclosure
2010-04-22 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 6.0.28
2010-07-09 00:00:00
Fixed in Apache Tomcat 5.5.30
2010-07-09 00:00:00
redhat
redhat
(RHSA-2010:0584) Important: jbossweb security update
2010-08-02 00:00:00
(RHSA-2011:0897) Moderate: JBoss Enterprise Web Server 1.0.2 update
2011-06-22 00:00:00
debian
debian
[SECURITY] [DSA 2207-1] tomcat5.5 security update
2011-03-29 22:35:34
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
ibm
ibm
Security Bulletin: Apache Log4j Vulnerabilities Affect IBM Sterling B2B Integrator
2021-10-06 14:56:49

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.154 Low

EPSS

Percentile

95.9%

JSON
Related for GHSA-W6Q7-WW2X-7GM3
nessus23openvas18osv1cve1exploitpack1securityvulns4nvd1seebug3prion1freebsd1cvelist1ubuntucve1exploitdb1tomcat2redhat2debian1gentoo1ibm1