Advisory details:
github_osv / GHSA-4prh-gqw8-rgh5
| Advisory ID | github_osv/GHSA-4prh-gqw8-rgh5 |
| Aliases |
CVE-2007-0450
|
| Summary | Apache Tomcat Directory Traversal Directory traversal vulnerability in Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a `..` (dot dot) sequence with combinations of (1) `/` (slash), (2) `\` (backslash), and (3) URL-encoded backslash (`%5C`) characters in the URL, which are valid separators in Tomcat but not in Apache. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| System | Score | Found at |
|---|---|---|
| generic_textual | MODERATE |
| Data source | Exploit-DB |
|---|---|
| Date added | March 14, 2007 |
| Description | Apache Tomcat 5.x/6.0.x - Directory Traversal |
| Ransomware campaign use | Known |
| Source publication date | March 14, 2007 |
| Exploit type | remote |
| Platform | linux |
| Source update date | Nov. 21, 2013 |
| Source URL | https://www.securityfocus.com/bid/22960/info |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.