CVE-2011-1475
Publicada el · Actualizada el
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 8.7%
probabilidad de explotación
8.7%top 5% de las CVE
explotación observada
noninguna fuente lo reporta
The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users."
Productos afectados
n/a · n/aReferencias
http://seclists.org/fulldisclosure/2011/Apr/97http://securityreason.com/securityalert/8188https://exchange.xforce.ibmcloud.com/vulnerabilities/66676https://issues.apache.org/bugzilla/show_bug.cgi?id=50957https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12374http://svn.apache.org/viewvc?view=revision&revision=1086349http://svn.apache.org/viewvc?view=revision&revision=1086352http://tomcat.apache.org/security-7.htmlhttp://www.securityfocus.com/archive/1/517363http://www.securityfocus.com/bid/47199http://www.securitytracker.com/id?1025303http://www.vupen.com/english/advisories/2011/0894