CVE-2017-12616
YüksekTeknik Veri (Otomatik)
- CVSS Skoru
- 7.5
- EPSS
- 70.1%
- CWE
- CWE-200
- KEV Durumu
- Hayır
Yayım tarihi: 19 Eylül 2017
Etkilenen: apache tomcat
When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.
Referanslar
- http://www.securityfocus.com/bid/100897
- http://www.securitytracker.com/id/1039393
- https://access.redhat.com/errata/RHSA-2018:0465
- https://access.redhat.com/errata/RHSA-2018:0466
- https://lists.apache.org/thread.html/1df9b4552464caa42047062fe7175da0da06c18ecc8daf99258bbda6%40%3Cannounce.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E
Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.