CVE-2011-3190

CVE-2011-3190

Publicada em · Atualizada em

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 15%
probabilidade de exploração
15%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret a request body as a new request.
Produtos afetados
n/a · n/a
Referências
http://marc.info/?l=bugtraq&m=132215163318824&w=2http://marc.info/?l=bugtraq&m=133469267822771&w=2http://marc.info/?l=bugtraq&m=136485229118404&w=2http://marc.info/?l=bugtraq&m=139344343412337&w=2http://secunia.com/advisories/45748http://secunia.com/advisories/48308http://secunia.com/advisories/49094http://secunia.com/advisories/57126http://securityreason.com/securityalert/8362https://exchange.xforce.ibmcloud.com/vulnerabilities/69472https://issues.apache.org/bugzilla/show_bug.cgi?id=51698https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E