PT-2002-1544 · Apache · Apache Tomcat
Publicado
2002-08-12
·
Atualizado
2022-04-30
·
CVE-2002-0493
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Apache Tomcat (affected versions not specified)
Description
The issue arises when Apache Tomcat encounters errors while reading the
web.xml file, potentially leading to the server starting without proper security settings. This could allow attackers to bypass intended restrictions. Specifically, if errors occur during the parsing of web.xml and Tomcat is configured to use a security manager, it is possible for Tomcat to start without the security manager in place.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Incorrect Default Permissions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Apache Tomcat