Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:43797
HistoryOct 12, 2023 - 2:31 p.m.

Information Disclosure

2023-10-1214:31:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
tomcat
catalina
vulnerability
information disclosure
software

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.01

Percentile

83.5%

JSON

tomcat-catalina is vulnerable to information disclosure. This vulnerability exists due to an improper request recycling mechanism, allowing an attacker to possibly access other requests.

Related

osv 9
ibm 21
cvelist 1
debiancve 1
ubuntucve 1
openvas 12
nvd 1
vulnrichment 1
nessus 36
redhatcve 1
f5 1
github 1
prion 1
cve 1
redhat 5
mageia 1
tomcat 4
qualysblog 1
kaspersky 2
amazon 1
redos 1
oraclelinux 2
almalinux 2
debian 3
rosalinux 1
ics 1
oracle 1
osv
osv
Apache Tomcat Incomplete Cleanup vulnerability
2023-10-10 18:31:35
BIT-tomcat-2023-42795
2024-03-06 11:08:01
CVE-2023-42795
2023-10-10 18:15:18
ibm
ibm
Security Bulletin: Vulnerability in Apache Tomcat affects App Connect Professional.
2023-12-29 07:37:07
Security Bulletin: [All] Apache Tomcat (core only) - CVE-2023-42795 (Publicly disclosed vulnerability)
2024-01-16 06:49:32
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a sensitive information exposure in Apache Tomcat [CVE-2023-42795]
2024-01-31 23:34:28
cvelist
cvelist
CVE-2023-42795 Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests
2023-10-10 17:42:16
debiancve
debiancve
CVE-2023-42795
2023-10-10 18:15:18
ubuntucve
ubuntucve
CVE-2023-42795
2023-10-10 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2024-1166)
2024-02-09 00:00:00
Mageia: Security Advisory (MGASA-2023-0319)
2023-11-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4337-1)
2023-11-03 00:00:00
nvd
nvd
CVE-2023-42795
2023-10-10 18:15:18
vulnrichment
vulnrichment
CVE-2023-42795 Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests
2023-10-10 17:42:16
nessus
nessus
EulerOS 2.0 SP5 : tomcat (EulerOS-SA-2024-1166)
2024-02-08 00:00:00
F5 Networks BIG-IP : Apache Tomcat vulnerability (K000138178)
2024-01-17 00:00:00
RHEL 7 / 8 / 9 : Red Hat JBoss Web Server 5.7.6 (RHSA-2023:6206)
2023-10-31 00:00:00
redhatcve
redhatcve
CVE-2023-42795
2023-10-24 03:27:08
f5
f5
K000138178 : Apache Tomcat vulnerability CVE-2023-42795
2024-01-17 00:00:00
github
github
Apache Tomcat Incomplete Cleanup vulnerability
2023-10-10 18:31:35
prion
prion
Input validation
2023-10-10 18:15:00
cve
cve
CVE-2023-42795
2023-10-10 18:15:18
redhat
redhat
(RHSA-2023:6207) Moderate: Red Hat JBoss Web Server 5.7.6 release and security update
2023-10-31 13:03:48
(RHSA-2023:6206) Moderate: Red Hat JBoss Web Server 5.7.6 release and security update
2023-10-31 13:03:53
(RHSA-2024:0125) Moderate: tomcat security update
2024-01-10 09:29:51
mageia
mageia
Updated tomcat packages fix security vulnerabilities
2023-11-15 14:35:09
tomcat
tomcat
Fixed in Apache Tomcat 11.0.0-M12
2023-10-10 00:00:00
Fixed in Apache Tomcat 10.1.14
2023-10-10 00:00:00
Fixed in Apache Tomcat 9.0.81
2023-10-10 00:00:00
qualysblog
qualysblog
CVE-2023-44487 HTTP/2 Rapid Reset Attack
2023-10-10 22:01:49
kaspersky
kaspersky
KLA61362 Multiple vulnerabilities in Apache Tomcat
2023-10-10 00:00:00
KLA61363 Multiple vulnerabilities in Apache Tomcat
2023-10-10 00:00:00
amazon
amazon
Important: tomcat8
2023-10-16 13:45:00
redos
redos
ROS-20240405-12
2024-04-05 00:00:00
oraclelinux
oraclelinux
tomcat security update
2024-01-11 00:00:00
tomcat security update
2024-01-25 00:00:00
almalinux
almalinux
Moderate: tomcat security update
2024-01-10 00:00:00
Moderate: tomcat security update
2024-01-25 00:00:00
debian
debian
[SECURITY] [DLA 3617-1] tomcat9 security update
2023-10-13 13:58:32
[SECURITY] [DSA 5521-1] tomcat10 security update
2023-10-10 22:09:33
[SECURITY] [DSA 5522-1] tomcat9 security update
2023-10-10 22:11:02
rosalinux
rosalinux
Advisory ROSA-SA-2024-2418
2024-05-14 08:49:00
ics
ics
Siemens SINEC NMS
2024-08-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.01

Percentile

83.5%

JSON
Related for VERACODE:43797
osv9ibm21cvelist1debiancve1ubuntucve1openvas12nvd1vulnrichment1nessus36redhatcve1f51github1prion1cve1redhat5mageia1tomcat4qualysblog1kaspersky2amazon1redos1oraclelinux2almalinux2debian3rosalinux1ics1oracle1