Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-5x5f-9r6q-q7mh
Advisory ID github_osv/GHSA-5x5f-9r6q-q7mh
Aliases CVE-2008-0002
Summary Apache Tomcat Sensitive Information Disclosure Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
System Score Found at
generic_textual MODERATE
Reference id Reference type URL
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
http://marc.info/?l=bugtraq&m=139344343412337&w=2
http://security.gentoo.org/glsa/glsa-200804-10.xml
https://github.com/apache/tomcat
http://support.apple.com/kb/HT3216
https://web.archive.org/web/20080214133036/http://secunia.com/advisories/28915
https://web.archive.org/web/20080715062302/http://secunia.com/advisories/29711
https://web.archive.org/web/20080724052339/http://secunia.com/advisories/28834
https://web.archive.org/web/20081012021650/http://www.securityfocus.com/bid/27703
https://web.archive.org/web/20081013050642/http://secunia.com/advisories/32222
https://web.archive.org/web/20081120062646/http://securityreason.com/securityalert/3638
https://web.archive.org/web/20081121133027/http://www.securityfocus.com/archive/1/487812/100/0/threaded
https://web.archive.org/web/20091125140215/http://secunia.com/advisories/37460
https://web.archive.org/web/20120825080137/http://www.securityfocus.com/bid/31681
https://web.archive.org/web/20140723000733/http://secunia.com/advisories/57126
https://web.archive.org/web/20150621204350/http://www.securityfocus.com/archive/1/507985/100/0/threaded
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html
http://tomcat.apache.org/security-6.html
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
CVE-2008-0002 https://nvd.nist.gov/vuln/detail/CVE-2008-0002
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.