Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-t3ya-1w1r-h3dv
Summary
Apache Tomcat Sensitive Information Disclosure
Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.
Aliases
0
alias CVE-2008-0002
1
alias GHSA-5x5f-9r6q-q7mh
Fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@6.0.16
purl pkg:maven/org.apache.tomcat/tomcat@6.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-t4mh-zvhq-27du
1
vulnerability VCID-wg7f-pjmn-uudk
2
vulnerability VCID-y9hs-ymcm-3ucx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.16
Affected_packages
0
url pkg:maven/org.apache.tomcat/tomcat@6.0.0
purl pkg:maven/org.apache.tomcat/tomcat@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2kjh-4r2g-rqe6
1
vulnerability VCID-46sr-9kr3-1ubw
2
vulnerability VCID-4t2h-jjhm-y7fq
3
vulnerability VCID-5m85-3zyu-7qak
4
vulnerability VCID-6uuq-2a39-yubx
5
vulnerability VCID-74c7-a56p-kufz
6
vulnerability VCID-7787-4bwm-efgq
7
vulnerability VCID-89e9-m968-vfhe
8
vulnerability VCID-9hm5-e4dw-6ffe
9
vulnerability VCID-9j31-459b-4qbm
10
vulnerability VCID-aar2-398x-p3d8
11
vulnerability VCID-atus-ryef-17h1
12
vulnerability VCID-axzz-cadr-b7fv
13
vulnerability VCID-crhe-rt8j-wycu
14
vulnerability VCID-eawm-8v9w-yfap
15
vulnerability VCID-eygg-nt7y-qubh
16
vulnerability VCID-f4ka-47dk-zffs
17
vulnerability VCID-fu9h-e3jx-abe2
18
vulnerability VCID-fuxz-fqw3-ufa9
19
vulnerability VCID-hmqa-jhuf-hfe2
20
vulnerability VCID-hqzu-shyu-j3hp
21
vulnerability VCID-jw6e-g8z9-43ej
22
vulnerability VCID-kxc3-vz2c-wqca
23
vulnerability VCID-n4zk-mdyw-3fcz
24
vulnerability VCID-pq53-6deg-abfx
25
vulnerability VCID-pzkk-4e94-aqag
26
vulnerability VCID-qz87-x4zb-rud7
27
vulnerability VCID-qzyq-d6qk-67ag
28
vulnerability VCID-rdr4-db3y-p3cz
29
vulnerability VCID-redv-2x5y-8khx
30
vulnerability VCID-s37s-p75k-27e6
31
vulnerability VCID-t3ya-1w1r-h3dv
32
vulnerability VCID-t4mh-zvhq-27du
33
vulnerability VCID-tcmv-6ftg-fqen
34
vulnerability VCID-vsta-e8jg-4qa8
35
vulnerability VCID-w8uj-zy2r-fyca
36
vulnerability VCID-wg7f-pjmn-uudk
37
vulnerability VCID-wtke-y2cx-x3et
38
vulnerability VCID-y9yv-u4jh-mqew
39
vulnerability VCID-yswq-hnqg-sycs
40
vulnerability VCID-yvcg-96dp-r7e6
41
vulnerability VCID-zm75-zwps-h3fv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.0
References
0
reference_url http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
reference_id
reference_type
scores
url http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
2
reference_url http://marc.info/?l=bugtraq&m=139344343412337&w=2
reference_id
reference_type
scores
url http://marc.info/?l=bugtraq&m=139344343412337&w=2
3
reference_url http://security.gentoo.org/glsa/glsa-200804-10.xml
reference_id
reference_type
scores
url http://security.gentoo.org/glsa/glsa-200804-10.xml
4
reference_url http://support.apple.com/kb/HT3216
reference_id
reference_type
scores
url http://support.apple.com/kb/HT3216
5
reference_url https://web.archive.org/web/20080214133036/http://secunia.com/advisories/28915
reference_id
reference_type
scores
url https://web.archive.org/web/20080214133036/http://secunia.com/advisories/28915
6
reference_url https://web.archive.org/web/20080715062302/http://secunia.com/advisories/29711
reference_id
reference_type
scores
url https://web.archive.org/web/20080715062302/http://secunia.com/advisories/29711
7
reference_url https://web.archive.org/web/20080724052339/http://secunia.com/advisories/28834
reference_id
reference_type
scores
url https://web.archive.org/web/20080724052339/http://secunia.com/advisories/28834
8
reference_url https://web.archive.org/web/20081012021650/http://www.securityfocus.com/bid/27703
reference_id
reference_type
scores
url https://web.archive.org/web/20081012021650/http://www.securityfocus.com/bid/27703
9
reference_url https://web.archive.org/web/20081013050642/http://secunia.com/advisories/32222
reference_id
reference_type
scores
url https://web.archive.org/web/20081013050642/http://secunia.com/advisories/32222
10
reference_url https://web.archive.org/web/20081120062646/http://securityreason.com/securityalert/3638
reference_id
reference_type
scores
url https://web.archive.org/web/20081120062646/http://securityreason.com/securityalert/3638
11
reference_url https://web.archive.org/web/20081121133027/http://www.securityfocus.com/archive/1/487812/100/0/threaded
reference_id
reference_type
scores
url https://web.archive.org/web/20081121133027/http://www.securityfocus.com/archive/1/487812/100/0/threaded
12
reference_url https://web.archive.org/web/20091125140215/http://secunia.com/advisories/37460
reference_id
reference_type
scores
url https://web.archive.org/web/20091125140215/http://secunia.com/advisories/37460
13
reference_url https://web.archive.org/web/20120825080137/http://www.securityfocus.com/bid/31681
reference_id
reference_type
scores
url https://web.archive.org/web/20120825080137/http://www.securityfocus.com/bid/31681
14
reference_url https://web.archive.org/web/20140723000733/http://secunia.com/advisories/57126
reference_id
reference_type
scores
url https://web.archive.org/web/20140723000733/http://secunia.com/advisories/57126
15
reference_url https://web.archive.org/web/20150621204350/http://www.securityfocus.com/archive/1/507985/100/0/threaded
reference_id
reference_type
scores
url https://web.archive.org/web/20150621204350/http://www.securityfocus.com/archive/1/507985/100/0/threaded
16
reference_url https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html
reference_id
reference_type
scores
url https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html
17
reference_url https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html
reference_id
reference_type
scores
url https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html
18
reference_url http://tomcat.apache.org/security-6.html
reference_id
reference_type
scores
url http://tomcat.apache.org/security-6.html
19
reference_url http://www.vmware.com/security/advisories/VMSA-2009-0016.html
reference_id
reference_type
scores
url http://www.vmware.com/security/advisories/VMSA-2009-0016.html
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2008-0002
reference_id CVE-2008-0002
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2008-0002
21
reference_url https://github.com/advisories/GHSA-5x5f-9r6q-q7mh
reference_id GHSA-5x5f-9r6q-q7mh
reference_type
scores
url https://github.com/advisories/GHSA-5x5f-9r6q-q7mh
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-t3ya-1w1r-h3dv