VulnerableCode Package Details - pkg:apache/tomcat@8.0.42

Search for packages

Vulnerability	Summary	Fixed by
VCID-w4q7-4d2t-aaan Aliases: CVE-2017-5647 GHSA-3gv7-3h64-78cm	Information Exposure When "send file" is used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C.	8.0.43 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 8.5.13 Affected by 41 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 9.0.0+M19 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-w4q7-4d2t-aaan
Aliases:
CVE-2017-5647
GHSA-3gv7-3h64-78cm

Information Exposure When "send file" is used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C.

8.0.43
Affected by 1 other vulnerability.

8.5.13
Affected by 41 other vulnerabilities.

9.0.0+M19
Affected by 0 other vulnerabilities.

Vulnerability	Summary	Aliases
VCID-11gb-2qp7-aaaj	Exposure of Resource to Wrong Sphere Some calls to application listeners in Apache Tomcat did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was therefore possible for that untrusted application to retain a reference to the request or response object and thereby access and/or modify information associated with another web application.	CVE-2017-5648 GHSA-3vx3-xf6q-r5xp

Vulnerability

Summary

Aliases

VCID-11gb-2qp7-aaaj

Exposure of Resource to Wrong Sphere Some calls to application listeners in Apache Tomcat did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was therefore possible for that untrusted application to retain a reference to the request or response object and thereby access and/or modify information associated with another web application.

CVE-2017-5648
GHSA-3vx3-xf6q-r5xp

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-03-28T13:19:25.039493+00:00	Apache Tomcat Importer	Fixing	VCID-11gb-2qp7-aaaj	https://tomcat.apache.org/security-8.html	36.0.0
2025-03-28T13:19:24.806596+00:00	Apache Tomcat Importer	Affected by	VCID-w4q7-4d2t-aaan	https://tomcat.apache.org/security-8.html	36.0.0
2024-09-18T08:17:35.472724+00:00	Apache Tomcat Importer	Fixing	VCID-11gb-2qp7-aaaj	https://tomcat.apache.org/security-8.html	34.0.1
2024-09-18T08:17:35.248347+00:00	Apache Tomcat Importer	Affected by	VCID-w4q7-4d2t-aaan	https://tomcat.apache.org/security-8.html	34.0.1
2024-01-04T02:15:38.971407+00:00	Apache Tomcat Importer	Fixing	VCID-11gb-2qp7-aaaj	https://tomcat.apache.org/security-8.html	34.0.0rc1
2024-01-04T02:15:38.760955+00:00	Apache Tomcat Importer	Affected by	VCID-w4q7-4d2t-aaan	https://tomcat.apache.org/security-8.html	34.0.0rc1