PT-2013-3528 · Apache · Apache Tomcat
Wan_Jm
·
Publicado
2013-05-09
·
Atualizado
2022-05-17
·
CVE-2013-2071
CVSS v2.0
2.6
Baixa
| Vetor | AV:N/AC:H/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Apache Tomcat versions 7.0.0 through 7.0.39
Description
The issue arises from the improper handling of a RuntimeException in an AsyncListener within an application. This allows attackers to obtain sensitive request information intended for other applications under certain circumstances. The scenario is difficult to exploit deliberately but may occur unexpectedly if an application uses AsyncListeners that throw RuntimeExceptions.
Recommendations
For Apache Tomcat versions 7.0.0 through 7.0.39, update to version 7.0.40 or later to resolve the issue.
Exploit
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Tomcat