CVE-2002-0493

Опубликовано: 12 авг. 2002

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.

Ссылки

http://marc.info/?l=bugtraq&m=101709002410365&w=2
Mailing List
http://www.apachelabs.org/tomcat-dev/200108.mbox/%3C20010810000819.6350.qmail%40icarus.apache.org%3E
http://www.iss.net/security_center/static/9863.php
Third Party Advisory
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
http://marc.info/?l=bugtraq&m=101709002410365&w=2
Mailing List
http://www.apachelabs.org/tomcat-dev/200108.mbox/%3C20010810000819.6350.qmail%40icarus.apache.org%3E
http://www.iss.net/security_center/static/9863.php
Third Party Advisory
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*

Версия до 3.3.2 (включая)

EPSS

Процентиль: 83%

0.01978

Низкий

7.5 High

CVSS2

Дефекты

CWE-254

Связанные уязвимости

GHSA-p543-jg43-9pm5

github

около 3 лет назад

Apache Tomcat may be started without proper security settings