Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-g998-xymt-fudu
SummaryThe autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements via HTTP requests.
Aliases
0
alias CVE-2009-2901
1
alias GHSA-hjfh-7c4v-7q8h
Fixed_packages
0
url pkg:apache/tomcat@5.5.29
purl pkg:apache/tomcat@5.5.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7kjm-p97s-zuh8
1
vulnerability VCID-f2zy-gq57-ufat
2
vulnerability VCID-tfn5-6ckq-wyce
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.29
1
url pkg:apache/tomcat@6.0.24
purl pkg:apache/tomcat@6.0.24
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.24
2
url pkg:ebuild/www-servers/tomcat@7.0.23
purl pkg:ebuild/www-servers/tomcat@7.0.23
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/tomcat@7.0.23
Affected_packages
0
url pkg:apache/tomcat@5.5.0
purl pkg:apache/tomcat@5.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18j8-kwdv-dyak
1
vulnerability VCID-1qt3-ctae-sfgw
2
vulnerability VCID-241m-q6vd-kudk
3
vulnerability VCID-27q8-96un-9fbk
4
vulnerability VCID-2jnv-segx-zkfd
5
vulnerability VCID-4rcx-xfn5-7kdb
6
vulnerability VCID-6epr-2hbd-skcz
7
vulnerability VCID-6p3e-4u8s-17ep
8
vulnerability VCID-7969-7a8h-zyhh
9
vulnerability VCID-7kjm-p97s-zuh8
10
vulnerability VCID-86ur-vudp-4yc2
11
vulnerability VCID-87p8-zvvf-y7dm
12
vulnerability VCID-88v7-kc2y-bfd7
13
vulnerability VCID-a9cu-fxqw-xkdg
14
vulnerability VCID-acmu-9eqb-fya5
15
vulnerability VCID-bhq7-d545-27bj
16
vulnerability VCID-bung-pa58-ayfv
17
vulnerability VCID-d9ys-kxh6-nkgr
18
vulnerability VCID-dcrp-rae1-zfcm
19
vulnerability VCID-dhun-hj5q-dfch
20
vulnerability VCID-f2zy-gq57-ufat
21
vulnerability VCID-fvvt-kufu-k3a6
22
vulnerability VCID-g998-xymt-fudu
23
vulnerability VCID-hhk9-cr54-8fgc
24
vulnerability VCID-mctd-9zgv-5qgp
25
vulnerability VCID-mnf8-t3ew-4fgb
26
vulnerability VCID-n76n-ywja-rbhh
27
vulnerability VCID-peya-mr7j-vugf
28
vulnerability VCID-q7jp-hn4a-4kec
29
vulnerability VCID-qdck-q54n-rkcv
30
vulnerability VCID-quwu-ep21-cyew
31
vulnerability VCID-qxkf-4ddv-j3b7
32
vulnerability VCID-r84b-7ay9-ekcm
33
vulnerability VCID-skar-qk57-qkdv
34
vulnerability VCID-su1y-2bxh-9qe2
35
vulnerability VCID-tcju-3rvu-wkht
36
vulnerability VCID-tfn5-6ckq-wyce
37
vulnerability VCID-v94p-bxm3-akfd
38
vulnerability VCID-vm4b-26sq-tfev
39
vulnerability VCID-wsn2-pd9b-b3g8
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.0
1
url pkg:apache/tomcat@5.5.28
purl pkg:apache/tomcat@5.5.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-g998-xymt-fudu
2
vulnerability VCID-vm4b-26sq-tfev
3
vulnerability VCID-wsn2-pd9b-b3g8
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.28
2
url pkg:apache/tomcat@6.0.0
purl pkg:apache/tomcat@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-1k8f-vsg1-k3d6
2
vulnerability VCID-1qt3-ctae-sfgw
3
vulnerability VCID-241m-q6vd-kudk
4
vulnerability VCID-27q8-96un-9fbk
5
vulnerability VCID-3cr9-g81m-4ugy
6
vulnerability VCID-3n4t-bvb1-5qer
7
vulnerability VCID-3r3s-q21j-c3au
8
vulnerability VCID-4mkw-7haq-pkgn
9
vulnerability VCID-4rcx-xfn5-7kdb
10
vulnerability VCID-68fk-4g86-ekbp
11
vulnerability VCID-6epr-2hbd-skcz
12
vulnerability VCID-6p3e-4u8s-17ep
13
vulnerability VCID-7969-7a8h-zyhh
14
vulnerability VCID-7cpu-h5fr-8ffd
15
vulnerability VCID-7ej8-5f77-cybb
16
vulnerability VCID-7kjm-p97s-zuh8
17
vulnerability VCID-7pd9-1r19-73fe
18
vulnerability VCID-87p8-zvvf-y7dm
19
vulnerability VCID-88v7-kc2y-bfd7
20
vulnerability VCID-95d1-arxd-hkd1
21
vulnerability VCID-a1by-zvtm-akdc
22
vulnerability VCID-a9cu-fxqw-xkdg
23
vulnerability VCID-acmu-9eqb-fya5
24
vulnerability VCID-bung-pa58-ayfv
25
vulnerability VCID-d9ys-kxh6-nkgr
26
vulnerability VCID-dcrp-rae1-zfcm
27
vulnerability VCID-dhun-hj5q-dfch
28
vulnerability VCID-egup-27ub-6uaf
29
vulnerability VCID-f2zy-gq57-ufat
30
vulnerability VCID-fpuc-fe6m-47c6
31
vulnerability VCID-g998-xymt-fudu
32
vulnerability VCID-h9ds-trhx-m7aj
33
vulnerability VCID-hhk9-cr54-8fgc
34
vulnerability VCID-hhkg-mfp5-2kax
35
vulnerability VCID-jf7u-dvpd-b7f4
36
vulnerability VCID-kagr-74d9-kyhx
37
vulnerability VCID-kgd1-bzst-muh7
38
vulnerability VCID-kzzv-rhya-j7dd
39
vulnerability VCID-m1zd-uytj-3bej
40
vulnerability VCID-mctd-9zgv-5qgp
41
vulnerability VCID-mnf8-t3ew-4fgb
42
vulnerability VCID-mwk8-b5c9-kbb9
43
vulnerability VCID-n76n-ywja-rbhh
44
vulnerability VCID-p4dn-y54m-8fd1
45
vulnerability VCID-p6ch-pc73-b3ck
46
vulnerability VCID-peya-mr7j-vugf
47
vulnerability VCID-qdck-q54n-rkcv
48
vulnerability VCID-quwu-ep21-cyew
49
vulnerability VCID-qxkf-4ddv-j3b7
50
vulnerability VCID-r84b-7ay9-ekcm
51
vulnerability VCID-su1y-2bxh-9qe2
52
vulnerability VCID-tcbc-3kgt-muam
53
vulnerability VCID-tcju-3rvu-wkht
54
vulnerability VCID-tfn5-6ckq-wyce
55
vulnerability VCID-tfrs-d458-tfaq
56
vulnerability VCID-twh8-87va-juf9
57
vulnerability VCID-v94p-bxm3-akfd
58
vulnerability VCID-vd1s-m27a-8ucc
59
vulnerability VCID-vm4b-26sq-tfev
60
vulnerability VCID-w82a-7kk2-p3f1
61
vulnerability VCID-wsn2-pd9b-b3g8
62
vulnerability VCID-xf8r-kqxb-7qdy
63
vulnerability VCID-ygvw-69am-s7ae
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.0
3
url pkg:apache/tomcat@6.0.20
purl pkg:apache/tomcat@6.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-g998-xymt-fudu
2
vulnerability VCID-vm4b-26sq-tfev
3
vulnerability VCID-wsn2-pd9b-b3g8
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.20
4
url pkg:maven/org.apache.tomcat/tomcat@5.5.0
purl pkg:maven/org.apache.tomcat/tomcat@5.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-18j8-kwdv-dyak
2
vulnerability VCID-1qt3-ctae-sfgw
3
vulnerability VCID-1v6c-f56v-hqh1
4
vulnerability VCID-241m-q6vd-kudk
5
vulnerability VCID-27q8-96un-9fbk
6
vulnerability VCID-2jnv-segx-zkfd
7
vulnerability VCID-4rcx-xfn5-7kdb
8
vulnerability VCID-6epr-2hbd-skcz
9
vulnerability VCID-6p3e-4u8s-17ep
10
vulnerability VCID-7969-7a8h-zyhh
11
vulnerability VCID-7kjm-p97s-zuh8
12
vulnerability VCID-86ur-vudp-4yc2
13
vulnerability VCID-87p8-zvvf-y7dm
14
vulnerability VCID-88v7-kc2y-bfd7
15
vulnerability VCID-8ebv-6941-jqdy
16
vulnerability VCID-a9cu-fxqw-xkdg
17
vulnerability VCID-acmu-9eqb-fya5
18
vulnerability VCID-bhq7-d545-27bj
19
vulnerability VCID-bung-pa58-ayfv
20
vulnerability VCID-d9ys-kxh6-nkgr
21
vulnerability VCID-dcrp-rae1-zfcm
22
vulnerability VCID-dhun-hj5q-dfch
23
vulnerability VCID-egye-da2v-4ybh
24
vulnerability VCID-f2zy-gq57-ufat
25
vulnerability VCID-fvvt-kufu-k3a6
26
vulnerability VCID-g7eg-s99s-xqe7
27
vulnerability VCID-g998-xymt-fudu
28
vulnerability VCID-hhk9-cr54-8fgc
29
vulnerability VCID-mctd-9zgv-5qgp
30
vulnerability VCID-mnf8-t3ew-4fgb
31
vulnerability VCID-n76n-ywja-rbhh
32
vulnerability VCID-peya-mr7j-vugf
33
vulnerability VCID-q7jp-hn4a-4kec
34
vulnerability VCID-qdck-q54n-rkcv
35
vulnerability VCID-quwu-ep21-cyew
36
vulnerability VCID-qxkf-4ddv-j3b7
37
vulnerability VCID-r5rc-rdd9-bfbk
38
vulnerability VCID-r84b-7ay9-ekcm
39
vulnerability VCID-rrdj-ssn7-zfdj
40
vulnerability VCID-rwvj-tq6x-2ubs
41
vulnerability VCID-skar-qk57-qkdv
42
vulnerability VCID-su1y-2bxh-9qe2
43
vulnerability VCID-tcju-3rvu-wkht
44
vulnerability VCID-tfn5-6ckq-wyce
45
vulnerability VCID-v94p-bxm3-akfd
46
vulnerability VCID-vm4b-26sq-tfev
47
vulnerability VCID-wsn2-pd9b-b3g8
48
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.0
5
url pkg:maven/org.apache.tomcat/tomcat@5.5.28
purl pkg:maven/org.apache.tomcat/tomcat@5.5.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-g998-xymt-fudu
2
vulnerability VCID-vm4b-26sq-tfev
3
vulnerability VCID-wsn2-pd9b-b3g8
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.28
6
url pkg:maven/org.apache.tomcat/tomcat@6.0.0
purl pkg:maven/org.apache.tomcat/tomcat@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-18q4-zark-s7a7
2
vulnerability VCID-1k8f-vsg1-k3d6
3
vulnerability VCID-1qt3-ctae-sfgw
4
vulnerability VCID-1v6c-f56v-hqh1
5
vulnerability VCID-241m-q6vd-kudk
6
vulnerability VCID-27q8-96un-9fbk
7
vulnerability VCID-3cr9-g81m-4ugy
8
vulnerability VCID-3n4t-bvb1-5qer
9
vulnerability VCID-3r3s-q21j-c3au
10
vulnerability VCID-4mkw-7haq-pkgn
11
vulnerability VCID-4rcx-xfn5-7kdb
12
vulnerability VCID-68fk-4g86-ekbp
13
vulnerability VCID-6epr-2hbd-skcz
14
vulnerability VCID-6p3e-4u8s-17ep
15
vulnerability VCID-7969-7a8h-zyhh
16
vulnerability VCID-7cpu-h5fr-8ffd
17
vulnerability VCID-7ej8-5f77-cybb
18
vulnerability VCID-7kjm-p97s-zuh8
19
vulnerability VCID-7pd9-1r19-73fe
20
vulnerability VCID-87p8-zvvf-y7dm
21
vulnerability VCID-88v7-kc2y-bfd7
22
vulnerability VCID-8ebv-6941-jqdy
23
vulnerability VCID-95d1-arxd-hkd1
24
vulnerability VCID-a1by-zvtm-akdc
25
vulnerability VCID-a9cu-fxqw-xkdg
26
vulnerability VCID-acmu-9eqb-fya5
27
vulnerability VCID-bung-pa58-ayfv
28
vulnerability VCID-d9ys-kxh6-nkgr
29
vulnerability VCID-dcrp-rae1-zfcm
30
vulnerability VCID-dhun-hj5q-dfch
31
vulnerability VCID-egup-27ub-6uaf
32
vulnerability VCID-egye-da2v-4ybh
33
vulnerability VCID-f2zy-gq57-ufat
34
vulnerability VCID-fpuc-fe6m-47c6
35
vulnerability VCID-g7eg-s99s-xqe7
36
vulnerability VCID-g998-xymt-fudu
37
vulnerability VCID-h9ds-trhx-m7aj
38
vulnerability VCID-hhk9-cr54-8fgc
39
vulnerability VCID-hhkg-mfp5-2kax
40
vulnerability VCID-jau7-gfz8-dkfa
41
vulnerability VCID-jf7u-dvpd-b7f4
42
vulnerability VCID-jtg7-217a-qqhk
43
vulnerability VCID-kagr-74d9-kyhx
44
vulnerability VCID-kgd1-bzst-muh7
45
vulnerability VCID-kzzv-rhya-j7dd
46
vulnerability VCID-m1zd-uytj-3bej
47
vulnerability VCID-mctd-9zgv-5qgp
48
vulnerability VCID-mnf8-t3ew-4fgb
49
vulnerability VCID-mwk8-b5c9-kbb9
50
vulnerability VCID-n76n-ywja-rbhh
51
vulnerability VCID-p4dn-y54m-8fd1
52
vulnerability VCID-p6ch-pc73-b3ck
53
vulnerability VCID-peya-mr7j-vugf
54
vulnerability VCID-qdck-q54n-rkcv
55
vulnerability VCID-quwu-ep21-cyew
56
vulnerability VCID-qxkf-4ddv-j3b7
57
vulnerability VCID-r5rc-rdd9-bfbk
58
vulnerability VCID-r84b-7ay9-ekcm
59
vulnerability VCID-rrdj-ssn7-zfdj
60
vulnerability VCID-rwvj-tq6x-2ubs
61
vulnerability VCID-su1y-2bxh-9qe2
62
vulnerability VCID-t9y6-suc2-2kcg
63
vulnerability VCID-ta1m-dh8x-nubc
64
vulnerability VCID-tcbc-3kgt-muam
65
vulnerability VCID-tcju-3rvu-wkht
66
vulnerability VCID-tfn5-6ckq-wyce
67
vulnerability VCID-tfrs-d458-tfaq
68
vulnerability VCID-twh8-87va-juf9
69
vulnerability VCID-v94p-bxm3-akfd
70
vulnerability VCID-vd1s-m27a-8ucc
71
vulnerability VCID-vm4b-26sq-tfev
72
vulnerability VCID-w82a-7kk2-p3f1
73
vulnerability VCID-wsn2-pd9b-b3g8
74
vulnerability VCID-xf8r-kqxb-7qdy
75
vulnerability VCID-ygvw-69am-s7ae
76
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.0
7
url pkg:maven/org.apache.tomcat/tomcat@6.0.20
purl pkg:maven/org.apache.tomcat/tomcat@6.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-g998-xymt-fudu
2
vulnerability VCID-vm4b-26sq-tfev
3
vulnerability VCID-wsn2-pd9b-b3g8
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.20
References
0
reference_url http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
reference_id
reference_type
scores
url http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
2
reference_url http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
3
reference_url http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
4
reference_url http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html
5
reference_url http://marc.info/?l=bugtraq&m=127420533226623&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=127420533226623&w=2
6
reference_url http://marc.info/?l=bugtraq&m=133469267822771&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=133469267822771&w=2
7
reference_url http://marc.info/?l=bugtraq&m=139344343412337&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=139344343412337&w=2
8
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2901.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2901.json
9
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2901
reference_id
reference_type
scores
0
value 0.06552
scoring_system epss
scoring_elements 0.91162
published_at 2026-04-18T12:55:00Z
1
value 0.06552
scoring_system epss
scoring_elements 0.91088
published_at 2026-04-01T12:55:00Z
2
value 0.06552
scoring_system epss
scoring_elements 0.91094
published_at 2026-04-02T12:55:00Z
3
value 0.06552
scoring_system epss
scoring_elements 0.91102
published_at 2026-04-04T12:55:00Z
4
value 0.06552
scoring_system epss
scoring_elements 0.91111
published_at 2026-04-07T12:55:00Z
5
value 0.06552
scoring_system epss
scoring_elements 0.91124
published_at 2026-04-08T12:55:00Z
6
value 0.06552
scoring_system epss
scoring_elements 0.91129
published_at 2026-04-09T12:55:00Z
7
value 0.06552
scoring_system epss
scoring_elements 0.91137
published_at 2026-04-11T12:55:00Z
8
value 0.06552
scoring_system epss
scoring_elements 0.91138
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2901
10
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/55856
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/55856
11
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
12
reference_url https://github.com/apache/tomcat55/commit/0299cb724ea71f304d54adfcdb950f59b01fb421
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat55/commit/0299cb724ea71f304d54adfcdb950f59b01fb421
13
reference_url https://github.com/apache/tomcat/commit/3e1010b1a2f648581fac3d68afbf18f2979f6bf6
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/3e1010b1a2f648581fac3d68afbf18f2979f6bf6
14
reference_url https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E
15
reference_url https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E
16
reference_url https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E
17
reference_url https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E
18
reference_url https://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
19
reference_url https://svn.apache.org/viewvc?view=rev&rev=892815
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=892815
20
reference_url https://svn.apache.org/viewvc?view=rev&rev=902650
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=902650
21
reference_url http://support.apple.com/kb/HT4077
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://support.apple.com/kb/HT4077
22
reference_url http://svn.apache.org/viewvc?rev=892815&view=rev
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?rev=892815&view=rev
23
reference_url http://svn.apache.org/viewvc?rev=902650&view=rev
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?rev=902650&view=rev
24
reference_url http://tomcat.apache.org/security-5.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-5.html
25
reference_url http://tomcat.apache.org/security-6.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-6.html
26
reference_url http://ubuntu.com/usn/usn-899-1
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://ubuntu.com/usn/usn-899-1
27
reference_url http://www.vmware.com/security/advisories/VMSA-2011-0003.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vmware.com/security/advisories/VMSA-2011-0003.html
28
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=559742
reference_id 559742
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=559742
29
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2901
reference_id CVE-2009-2901
reference_type
scores
0
value Low
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2901
30
reference_url https://nvd.nist.gov/vuln/detail/CVE-2009-2901
reference_id CVE-2009-2901
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2009-2901
31
reference_url https://github.com/advisories/GHSA-hjfh-7c4v-7q8h
reference_id GHSA-hjfh-7c4v-7q8h
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hjfh-7c4v-7q8h
32
reference_url https://security.gentoo.org/glsa/201206-24
reference_id GLSA-201206-24
reference_type
scores
url https://security.gentoo.org/glsa/201206-24
33
reference_url https://usn.ubuntu.com/899-1/
reference_id USN-899-1
reference_type
scores
url https://usn.ubuntu.com/899-1/
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 264
name Permissions, Privileges, and Access Controls
description Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 287
name Improper Authentication
description When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Exploits
Severity_range_score0.1 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-g998-xymt-fudu