Lucene search

K
prionPRIOn knowledge basePRION:CVE-2010-1157
HistoryApr 23, 2010 - 2:30 p.m.

Authentication flaw

2010-04-2314:30:00
PRIOn knowledge base
www.prio-n.com
7

7 High

AI Score

Confidence

Low

0.154 Low

EPSS

Percentile

95.9%

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the serverโ€™s hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.

References