CVE-2023-41080

2023-08-2500:00:00

ubuntu.com

cve-2023-41080

redirection vulnerability

apache tomcat

form authentication

untrusted site

open redirect

root web application

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.002 Low

EPSS

Percentile

64.6%

JSON

URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability in FORM
authentication feature Apache Tomcat.This issue affects Apache Tomcat: from
11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1
through 9.0.79 and from 8.5.0 through 8.5.92. The vulnerability is limited
to the ROOT (default) web application.

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchtomcat6< anyUNKNOWN
ubuntu16.04noarchtomcat6< anyUNKNOWN
ubuntu18.04noarchtomcat7< anyUNKNOWN
ubuntu14.04noarchtomcat7< anyUNKNOWN
ubuntu16.04noarchtomcat7< anyUNKNOWN
ubuntu18.04noarchtomcat8< anyUNKNOWN
ubuntu16.04noarchtomcat8< anyUNKNOWN
ubuntu18.04noarchtomcat9< anyUNKNOWN
ubuntu20.04noarchtomcat9< anyUNKNOWN
ubuntu22.04noarchtomcat9< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	tomcat6	< any	UNKNOWN
ubuntu	16.04	noarch	tomcat6	< any	UNKNOWN
ubuntu	18.04	noarch	tomcat7	< any	UNKNOWN
ubuntu	14.04	noarch	tomcat7	< any	UNKNOWN
ubuntu	16.04	noarch	tomcat7	< any	UNKNOWN
ubuntu	18.04	noarch	tomcat8	< any	UNKNOWN
ubuntu	16.04	noarch	tomcat8	< any	UNKNOWN
ubuntu	18.04	noarch	tomcat9	< any	UNKNOWN
ubuntu	20.04	noarch	tomcat9	< any	UNKNOWN
ubuntu	22.04	noarch	tomcat9	< any	UNKNOWN