Search for packages
purl | pkg:maven/org.apache.tomcat/tomcat@7.0.11 |
Tags | Ghost |
Next non-vulnerable version | None. |
Latest non-vulnerable version | None. |
Risk | 4.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-9r1h-gjdw-aaaa
Aliases: CVE-2011-1183 GHSA-p26v-97vp-jcx6 |
CVE-2011-1088 CVE-2011-1183 CVE-2011-1419 CVE-2011-1582 tomcat: various flaws due not following ServletSecurity annotations |
Affected by 1 other vulnerability. |
VCID-a8pg-33b2-aaap
Aliases: CVE-2011-1475 GHSA-h6c8-rg87-f3pc |
CVE-2011-1475 tomcat: Information disclosure due improper handling of HTTP pipelining |
Affected by 1 other vulnerability. |
VCID-fydf-hed2-aaas
Aliases: CVE-2011-1184 GHSA-q9xf-jwr4-v445 |
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values. |
Affected by 1 other vulnerability. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |