CVE-2008-0002

2008-02-1200:00:00

ubuntu.com

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

0.005

Percentile

75.7%

JSON

Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of
the wrong request when an exception occurs during parameter processing,
which might allow remote attackers to obtain sensitive information, as
demonstrated by disconnecting during this processing in order to trigger
the exception.