Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@5.5.28 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-9hhz-11ph-aaan
Aliases: CVE-2009-3548 |
The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges. |
Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-kg1r-u6pn-aaak
Aliases: CVE-2009-2902 GHSA-8wch-9gcg-v2pr |
CVE-2009-2902 tomcat: unexpected file deletion in work directory |
Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-x2d7-89h7-aaac
Aliases: CVE-2009-2693 GHSA-ggx9-4728-588r |
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry. |
Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-z4zw-kc9e-aaas
Aliases: CVE-2009-2901 GHSA-hjfh-7c4v-7q8h |
CVE-2009-2901 tomcat: insecure partial deploy after failed undeploy |
Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||