Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-h6c8-rg87-f3pc
Advisory ID github_osv/GHSA-h6c8-rg87-f3pc
Aliases CVE-2011-1475
Summary Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users."
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-20 Improper Input Validation
System Score Found at
generic_textual MODERATE
Reference id Reference type URL
http://seclists.org/fulldisclosure/2011/Apr/97
https://exchange.xforce.ibmcloud.com/vulnerabilities/66676
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/d2e8f2ede7dea39f75f68384f331f38f094e4ed3
https://github.com/apache/tomcat/commit/fd8a579e0e2379a84826b11700adf396e4ed2041
https://issues.apache.org/bugzilla/show_bug.cgi?id=50957
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12374
http://svn.apache.org/viewvc?view=revision&revision=1086349
http://svn.apache.org/viewvc?view=revision&revision=1086352
https://web.archive.org/web/20120605200856/http://www.securityfocus.com/bid/47199
https://web.archive.org/web/20170202012852/http://www.securityfocus.com/archive/1/517363
https://web.archive.org/web/20170317142459/http://www.securitytracker.com/id?1025303
http://tomcat.apache.org/security-7.html
CVE-2011-1475 https://nvd.nist.gov/vuln/detail/CVE-2011-1475
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.