VulnerableCode Advisory Details - GHSA-mg4v-rf8p-ghqq

System	Score	Found at
generic_textual	MODERATE

Reference id	Reference type	URL
		http://mail-archives.apache.org/mod_mbox/www-announce/201103.mbox/%3C4D6E74FF.7050106%40apache.org%3E
		http://mail-archives.apache.org/mod_mbox/www-announce/201103.mbox/%3C4D6E74FF.7050106@apache.org%3E
		http://markmail.org/message/lzx5273wsgl5pob6
		http://markmail.org/message/yzmyn44f5aetmm2r
		http://secunia.com/advisories/43684
		https://exchange.xforce.ibmcloud.com/vulnerabilities/65971
		https://github.com/apache/tomcat
		https://github.com/apache/tomcat/commit/02780bbc6089a12b19d3d5e5dc810455ac6bfe92
		https://github.com/apache/tomcat/commit/0a5a19f0c3b8d199b7335da5f88e956f59926673
		https://github.com/apache/tomcat/commit/0f95cb7401acdbfc9b65c878948b84bb496f2386
		https://github.com/apache/tomcat/commit/0ff4905158b77787a7f3aca55c9dec93456665dc
		https://github.com/apache/tomcat/commit/13fe121edb6f2b597d2b82725f1b01296ac78ebd
		https://github.com/apache/tomcat/commit/149af600532df6a24b1f7fc93607d764dfc9a7ea
		https://github.com/apache/tomcat/commit/1b2d5e90d271ab087a36b556eb17519454170529
		https://github.com/apache/tomcat/commit/2d7dbfe4c63a4242a9b28fdb662d91ceb7a84630
		https://github.com/apache/tomcat/commit/3ac2b5c1611af51ee5438fd32a3254a2de1878ce
		https://github.com/apache/tomcat/commit/3e5b0455483eed55752047073e92403bfca8d3ec
		https://github.com/apache/tomcat/commit/5c8560f3054982abaa476d87ec031c439d58d66e
		https://github.com/apache/tomcat/commit/63fd724e129b647b7d9026ae29513dd6b774b4b5
		https://github.com/apache/tomcat/commit/880b1a4fc424625b56c8bcd9ebf6bfe966a1dadd
		https://github.com/apache/tomcat/commit/9c90bdc1ad942374b1bb6b147613497970b3c8e1
		https://github.com/apache/tomcat/commit/b1d1047a4c0a7754cabf57ac0303f92e4e77ef58
		https://github.com/apache/tomcat/commit/dbac5e24759954daed3c584abb5d466fcf42dd4b
		https://github.com/apache/tomcat/commit/dd10265436ea8b2fe35f1a8b09bc7390acbea269
		https://github.com/apache/tomcat/commit/ece65c1a428094b1c6c17de3d7593f64e1bb1286
		https://github.com/apache/tomcat/commit/ee627412570268df47a075f5d4dc5f7debf39fad
		https://github.com/apache/tomcat/commit/f528992ec6cd7b62c9ced5b3a7dc4cda6bfd1a5e
		http://svn.apache.org/viewvc?view=revision&revision=1076586
		http://svn.apache.org/viewvc?view=revision&revision=1076587
		http://svn.apache.org/viewvc?view=revision&revision=1077995
		http://tomcat.apache.org/security-7.html
		http://www.osvdb.org/71027
		http://www.securityfocus.com/archive/1/517013/100/0/threaded
		http://www.securityfocus.com/bid/46685
		http://www.securitytracker.com/id?1025215
		http://www.vupen.com/english/advisories/2011/0563
CVE-2011-1088		https://nvd.nist.gov/vuln/detail/CVE-2011-1088

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.

Advisory ID	github_osv/GHSA-mg4v-rf8p-ghqq
Aliases	CVE-2011-1088
Summary	Apache Tomcat allows remote attackers to bypass intended access restrictions Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.
Status	Published
Exploitability	0.5
Weighted Severity	0.0
Risk
Affected and Fixed Packages	Package Details
Introduced and Fixed Package Commit Patches	Package Commit Patches Details