Lucene search
Redhat.comRH:CVE-2017-7674HistoryAug 11, 2017 - 2:19 p.m.
CVE-2017-7674
2017-08-1114:19:00
redhat.com
access.redhat.com
13
0.003 Low
EPSS
Percentile
68.4%
A vulnerability was discovered in Tomcat where the CORS Filter did not send a “Vary: Origin” HTTP header. This potentially allowed sensitive data to be leaked to other visitors through both client-side and server-side caches.
Related
nvd
nvd
CVE-2017-7674
2017-08-11 02:29:00
osv
osv
CVE-2017-7674
2017-08-11 02:29:00
tomcat8 - security update
2017-09-15 00:00:00
Insufficient Verification of Data Authenticity in Apache Tomcat
2022-05-14 01:10:15
ibm
ibm
Security Bulletin: Security vulnerability has been identified in Jazz Reporting Service shipped with Rational Reporting for Development Intelligence (CVE-2017-7674)
2018-06-17 05:26:48
nessus
nessus
Apache Tomcat 8.0.0.RC1 < 8.0.45
2017-08-18 00:00:00
Amazon Linux AMI : tomcat7 / tomcat8 (ALAS-2017-903)
2017-10-03 00:00:00
Fedora 26 : 1:tomcat (2017-ab0def38cd)
2017-09-15 00:00:00
cvelist
cvelist
CVE-2017-7674
2017-08-10 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: tomcat-8.0.46-1.fc26
2017-09-14 21:55:47
[SECURITY] Fedora 25 Update: tomcat-8.0.46-1.fc25
2017-09-15 03:51:31
tomcat
tomcat
Fixed in Apache Tomcat 8.0.45
2017-07-01 00:00:00
Fixed in Apache Tomcat 7.0.79
2017-07-01 00:00:00
Fixed in Apache Tomcat 9.0.0.M22
2017-06-26 00:00:00
debiancve
debiancve
CVE-2017-7674
2017-08-11 02:29:00
cve
cve
CVE-2017-7674
2017-08-11 02:29:00
openvas
openvas
Fedora Update for tomcat FEDORA-2017-a00a087fd4
2017-09-15 00:00:00
Fedora Update for tomcat FEDORA-2017-ab0def38cd
2017-09-15 00:00:00
Debian: Security Advisory (DSA-3974-1)
2017-09-14 00:00:00
prion
prion
Design/Logic Flaw
2017-08-11 02:29:00
veracode
veracode
Cache Poisoning
2017-08-11 04:26:48
ubuntucve
ubuntucve
CVE-2017-7674
2017-08-10 00:00:00
amazon
amazon
Medium: tomcat7, tomcat8
2017-10-02 16:47:00
Important: tomcat8
2017-08-03 18:49:00
Important: tomcat7
2017-08-17 18:30:00
github
github
Insufficient Verification of Data Authenticity in Apache Tomcat
2022-05-14 01:10:15
f5
f5
K92665308 : Apache Tomcat vulnerabilities CVE-2017-7674 and CVE-2017-7675
2017-08-17 00:00:00
mageia
mageia
Updated tomcat packages fix security vulnerability
2017-09-21 16:43:32
debian
debian
[SECURITY] [DSA 3974-1] tomcat8 security update
2017-09-15 15:20:36
[SECURITY] [DSA 3974-1] tomcat8 security update
2017-09-15 15:20:36
[SECURITY] [DLA 1400-1] tomcat7 security update
2018-06-27 20:56:21
suse
suse
Security update for tomcat (important)
2017-11-22 15:08:02
Security update for tomcat (important)
2017-11-24 00:09:51
Security update for tomcat (important)
2017-12-13 21:10:17
redhat
redhat
(RHSA-2017:3081) Important: tomcat security update
2017-10-29 22:36:17
centos
centos
tomcat security update
2017-10-30 11:36:20
ubuntu
ubuntu
Tomcat vulnerabilities
2018-01-08 00:00:00
oraclelinux
oraclelinux
tomcat security update
2017-10-30 00:00:00
symantec
symantec
SA156: Apache Tomcat Vulnerabilities Apr-Oct 2017
2017-11-07 08:00:00
oracle
oracle
Oracle Critical Patch Update - April 2018
2018-04-17 00:00:00