CVE ID:	CVE-2011-1475
Description:	The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users."
Test IDs:	1.3.6.1.4.1.25623.1.0.803780
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1475 1025303 http://www.securitytracker.com/id?1025303 20110406 [SECURITY] CVE-2011-1475 Apache Tomcat information disclosure http://seclists.org/fulldisclosure/2011/Apr/97 20110406 [SECURITY] CVE-2011-1475 Apache Tomcat information disclosure http://www.securityfocus.com/archive/1/517363 47199 http://www.securityfocus.com/bid/47199 8188 http://securityreason.com/securityalert/8188 ADV-2011-0894 http://www.vupen.com/english/advisories/2011/0894 http://svn.apache.org/viewvc?view=revision&revision=1086349 http://svn.apache.org/viewvc?view=revision&revision=1086349 http://svn.apache.org/viewvc?view=revision&revision=1086352 http://svn.apache.org/viewvc?view=revision&revision=1086352 http://tomcat.apache.org/security-7.html http://tomcat.apache.org/security-7.html https://issues.apache.org/bugzilla/show_bug.cgi?id=50957 https://issues.apache.org/bugzilla/show_bug.cgi?id=50957 oval:org.mitre.oval:def:12374 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12374 tomcat-httpbio-info-disclosure(66676) https://exchange.xforce.ibmcloud.com/vulnerabilities/66676