Test Kennung:	1.3.6.1.4.1.25623.1.0.149833
Kategorie:	Web Servers
Titel:	Apache Tomcat Information Disclosure Vulnerability (Jun 2023) - Windows
Zusammenfassung:	Apache Tomcat is prone to an information disclosure; vulnerability.
Beschreibung:	Summary: Apache Tomcat is prone to an information disclosure vulnerability. Vulnerability Insight: The fix for bug 66512 introduced a regression that was fixed as bug 66591. The regression meant that, if a response did not have any HTTP headers set, no AJP SEND_HEADERS message would be sent which in turn meant that at least one AJP based proxy (mod_proxy_ajp) would use the response headers from the previous request for the current request leading to an information leak. Affected Software/OS: Apache Tomcat version 8.5.88, 9.0.74, 10.1.8 and 11.0.0-M5. Solution: Update to version 8.5.89, 9.0.75, 10.1.9, 11.0.0-M6 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2023-34981 https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz
Copyright	Copyright (C) 2023 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.