Test ID:	1.3.6.1.4.1.25623.1.0.802385
Category:	Web Servers
Title:	Apache Tomcat Request Object Security Bypass Vulnerability - Windows
Summary:	Apache Tomcat Server is prone to a security bypass vulnerability.
Description:	Summary: Apache Tomcat Server is prone to a security bypass vulnerability. Vulnerability Insight: The flaw is due to improper recycling of the request object before processing the next request when logging certain actions, allowing attackers to gain sensitive information like remote IP address and HTTP headers which is being carried forward to the next request. Vulnerability Impact: Successful exploitation could allows remote attackers to bypass intended access restrictions or gain sensitive information. Affected Software/OS: Apache Tomcat 6.0.30 to 6.0.33 and 7.0.0 to 7.0.21 on Windows. Solution: Upgrade Apache Tomcat to 6.0.34, 7.0.22 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3375 Debian Security Information: DSA-2401 (Google Search) http://www.debian.org/security/2012/dsa-2401
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.