Test Kennung:	1.3.6.1.4.1.25623.1.0.802385
Kategorie:	Web Servers
Titel:	Apache Tomcat Request Object Security Bypass Vulnerability - Windows
Zusammenfassung:	Apache Tomcat Server is prone to a security bypass vulnerability.
Beschreibung:	Summary: Apache Tomcat Server is prone to a security bypass vulnerability. Vulnerability Insight: The flaw is due to improper recycling of the request object before processing the next request when logging certain actions, allowing attackers to gain sensitive information like remote IP address and HTTP headers which is being carried forward to the next request. Vulnerability Impact: Successful exploitation could allows remote attackers to bypass intended access restrictions or gain sensitive information. Affected Software/OS: Apache Tomcat 6.0.30 to 6.0.33 and 7.0.0 to 7.0.21 on Windows. Solution: Upgrade Apache Tomcat to 6.0.34, 7.0.22 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3375 Debian Security Information: DSA-2401 (Google Search) http://www.debian.org/security/2012/dsa-2401
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.