We found results for “”
CVE-2015-5345
Good to know:
Date: February 24, 2016
The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence of a directory via a URL that lacks a trailing / (slash) character.
Language: Java
Severity Score
Related Resources (55)
Severity Score
Weakness Type (CWE)
Path Traversal
CWE-22Top Fix
Upgrade Version
Upgrade to version org.apache.tomcat:catalina:6.0.45,org.apache.tomcat.embed:tomcat-embed-core:9.0.0.M21,8.0.30,7.0.68,org.apache.tomcat:tomcat-catalina:9.0.0.M21,8.0.30,7.0.68
CVSS v3.1
Base Score: |
|
---|---|
Attack Vector (AV): | NETWORK |
Attack Complexity (AC): | LOW |
Privileges Required (PR): | NONE |
User Interaction (UI): | NONE |
Scope (S): | UNCHANGED |
Confidentiality (C): | LOW |
Integrity (I): | NONE |
Availability (A): | NONE |
CVSS v2
Base Score: |
|
---|---|
Access Vector (AV): | NETWORK |
Access Complexity (AC): | LOW |
Authentication (AU): | NONE |
Confidentiality (C): | PARTIAL |
Integrity (I): | NONE |
Availability (A): | NONE |
Additional information: |