Количество 10
Количество 10
GHSA-w7cg-5969-678w
Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token
CVE-2015-5351
The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.
CVE-2015-5351
The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.
CVE-2015-5351
The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.
CVE-2015-5351
The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x ...
BDU:2016-00613
Уязвимость сервера приложений Apache Tomcat, позволяющая нарушителю обойти механизм защиты CSRF
openSUSE-SU-2016:0865-1
Security update for tomcat
SUSE-SU-2016:0822-1
Security update for tomcat
SUSE-SU-2016:0769-1
Security update for tomcat
ELSA-2016-2599
ELSA-2016-2599: tomcat security, bug fix, and enhancement update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-w7cg-5969-678w Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token | CVSS3: 8.8 | 6% Низкий | больше 3 лет назад |
 | CVE-2015-5351 The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token. | CVSS3: 8.8 | 6% Низкий | почти 10 лет назад |
 | CVE-2015-5351 The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token. | CVSS3: 8.8 | 6% Низкий | почти 10 лет назад |
 | CVE-2015-5351 The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token. | CVSS3: 8.8 | 6% Низкий | почти 10 лет назад |
| CVE-2015-5351 The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x ... | CVSS3: 8.8 | 6% Низкий | почти 10 лет назад |
 | BDU:2016-00613 Уязвимость сервера приложений Apache Tomcat, позволяющая нарушителю обойти механизм защиты CSRF | CVSS2: 6.8 | 6% Низкий | почти 10 лет назад |
 | openSUSE-SU-2016:0865-1 Security update for tomcat | почти 10 лет назад | ||
| SUSE-SU-2016:0822-1 Security update for tomcat | почти 10 лет назад | ||
| SUSE-SU-2016:0769-1 Security update for tomcat | почти 10 лет назад | ||
| ELSA-2016-2599 ELSA-2016-2599: tomcat security, bug fix, and enhancement update (MODERATE) | около 9 лет назад |
Уязвимостей на страницу