Test ID:	1.3.6.1.4.1.25623.1.0.811847
Category:	Web Servers
Title:	Apache Tomcat 'VirtualDirContext' Information Disclosure Vulnerability - Linux
Summary:	Apache Tomcat is prone to an information disclosure vulnerability.
Description:	Summary: Apache Tomcat is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to an improper serving of files via 'VirtualDirContext'. Vulnerability Impact: Successful exploitation will allow remote attackers to obtain potentially sensitive information on the target system. Affected Software/OS: Apache Tomcat versions 7.0.0 to 7.0.80 on Linux Solution: Upgrade to Tomcat version 7.0.81 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-12616 BugTraq ID: 100897 http://www.securityfocus.com/bid/100897 https://lists.apache.org/thread.html/1df9b4552464caa42047062fe7175da0da06c18ecc8daf99258bbda6@%3Cannounce.tomcat.apache.org%3E https://lists.debian.org/debian-lts-announce/2018/06/msg00008.html https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E RedHat Security Advisories: RHSA-2018:0465 https://access.redhat.com/errata/RHSA-2018:0465 RedHat Security Advisories: RHSA-2018:0466 https://access.redhat.com/errata/RHSA-2018:0466 http://www.securitytracker.com/id/1039393 https://usn.ubuntu.com/3665-1/
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.