Search for packages
purl | pkg:maven/org.apache.tomcat/tomcat@7.0.20 |
Tags | Ghost |
Next non-vulnerable version | None. |
Latest non-vulnerable version | None. |
Risk | 4.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-49pd-2mxh-aaaq
Aliases: CVE-2011-3190 GHSA-c38m-v4m2-524v |
Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret a request body as a new request. |
Affected by 2 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |
Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
---|---|---|---|---|---|
2025-03-28T13:19:31.505967+00:00 | Apache Tomcat Importer | Fixing | VCID-uuww-g5z6-aaad | https://tomcat.apache.org/security-7.html | 36.0.0 |
2025-03-28T13:19:31.448499+00:00 | Apache Tomcat Importer | Affected by | VCID-49pd-2mxh-aaaq | https://tomcat.apache.org/security-7.html | 36.0.0 |
2024-09-18T08:17:41.613994+00:00 | Apache Tomcat Importer | Fixing | VCID-uuww-g5z6-aaad | https://tomcat.apache.org/security-7.html | 34.0.1 |
2024-09-18T08:17:41.549672+00:00 | Apache Tomcat Importer | Affected by | VCID-49pd-2mxh-aaaq | https://tomcat.apache.org/security-7.html | 34.0.1 |
2024-09-17T22:36:36.863928+00:00 | GitLab Importer | Affected by | VCID-49pd-2mxh-aaaq | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2011-3190.yml | 34.0.1 |
2024-09-17T22:01:21.259498+00:00 | GHSA Importer | Affected by | VCID-49pd-2mxh-aaaq | https://github.com/advisories/GHSA-c38m-v4m2-524v | 34.0.1 |
2024-04-23T17:40:10.549941+00:00 | GHSA Importer | Affected by | VCID-49pd-2mxh-aaaq | https://github.com/advisories/GHSA-c38m-v4m2-524v | 34.0.0rc4 |
2024-01-19T15:47:05.079548+00:00 | GitLab Importer | Affected by | VCID-49pd-2mxh-aaaq | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2011-3190.yml | 34.0.0rc2 |
2024-01-18T00:30:30.899998+00:00 | GHSA Importer | Affected by | VCID-49pd-2mxh-aaaq | https://github.com/advisories/GHSA-c38m-v4m2-524v | 34.0.0rc2 |
2024-01-04T02:15:44.795662+00:00 | Apache Tomcat Importer | Fixing | VCID-uuww-g5z6-aaad | https://tomcat.apache.org/security-7.html | 34.0.0rc1 |
2024-01-04T02:15:44.739791+00:00 | Apache Tomcat Importer | Affected by | VCID-49pd-2mxh-aaaq | https://tomcat.apache.org/security-7.html | 34.0.0rc1 |