Advisory details:
gitlab / maven/org.apache.tomcat/tomcat/CVE-2007-5461
| Advisory ID | gitlab/maven/org.apache.tomcat/tomcat/CVE-2007-5461 |
| Aliases |
CVE-2007-5461
GHSA-v5p2-vg3c-pmrr |
| Summary | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| System | Score | Found at |
|---|---|---|
| cvssv2 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2007-5461.yml |
| Data source | Exploit-DB |
|---|---|
| Date added | Oct. 20, 2007 |
| Description | Apache Tomcat - WebDAV SSL Remote File Disclosure |
| Ransomware campaign use | Known |
| Source publication date | Oct. 21, 2007 |
| Exploit type | remote |
| Platform | linux |
| Source update date | Dec. 14, 2016 |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
There are no SSVC decisions available.