Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@5.5.29
purl pkg:maven/org.apache.tomcat/tomcat@5.5.29
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2010-3718

Low: SecurityManager file permission bypass There are no reported fixed by versions.
CVE-2010-2227

Important: Remote Denial Of Service and Information Disclosure Vulnerability There are no reported fixed by versions.
CVE-2010-1157

Low: Information disclosure in authentication headers There are no reported fixed by versions.
GHSA-w6q7-ww2x-7gm3
Aliases:
CVE-2010-1157
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 … There are no reported fixed by versions.
Vulnerabilities fixed by this package (8)

Advisory Summary Aliases
CVE-2009-2693
Low: Arbitrary file deletion and/or alteration on deploy
CVE-2009-2901
Low: Insecure partial deploy after failed undeploy
CVE-2009-2902
Low: Unexpected file deletion in work directory
CVE-2009-3548
Low: Insecure default password
CVE-2009-2901
Improper Authentication in Apache Tomcat The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy … GHSA-hjfh-7c4v-7q8h
GHSA-hjfh-7c4v-7q8h
Improper Authentication in Apache Tomcat The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy … CVE-2009-2901
GHSA-ggx9-4728-588r
Apache Tomcat Directory Traversal vulnerability Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote … CVE-2009-2693
GHSA-8wch-9gcg-v2pr
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat Directory traversal vulnerability in Apache Tomcat … CVE-2009-2902