Test ID:	1.3.6.1.4.1.25623.1.0.150908
Category:	Web Servers
Title:	Apache Tomcat Open Redirect Vulnerability (Aug 2023) - Linux
Summary:	Apache Tomcat is prone to an open redirect vulnerability.
Description:	Summary: Apache Tomcat is prone to an open redirect vulnerability. Vulnerability Insight: If the ROOT (default) web application is configured to use FORM authentication then it is possible that a specially crafted URL could be used to trigger a redirect to an URL of the attackers choice. Affected Software/OS: Apache Tomcat versions 8.5.0 through 8.5.92, 9.0.0-M1 through 9.0.79, 10.1.0-M1 through 10.1.12 and 11.0.0-M1 through 11.0.0-M10. Solution: Update to version 8.5.93, 9.0.80, 10.1.13, 11.0.0-M11 or later. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-41080 Debian Security Information: DSA-5521 (Google Search) https://www.debian.org/security/2023/dsa-5521 Debian Security Information: DSA-5522 (Google Search) https://www.debian.org/security/2023/dsa-5522 https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.