Поиск уязвимостей

Apache Tomcat Cross-site scripting (XSS) vulnerability

Apache Tomcat - XSS in generated JSPs

Apache Tomcat - HTTP/2 no-authority bypass of strict SNI validation

Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information

The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages.

Tomcat Vulnerable to Web Cache Poisoning

Apache Tomcat does not properly handle an invalid Transfer-Encoding header

Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.13 through 9.0.119, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120 which fix the issue.

Exposure of Sensitive Information in Apache Tomcat

org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager application's functionality.

Tomcat uses trusted privileges when processing web.xml file

java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.

The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts.

Improper Neutralization of Input During Web Page Generation in Apache Tomcat

Apache Tomcat has an Improper Authentication vulnerability

Insertion of Sensitive Information into Log File in Apache Tomcat

Apache Tomcat Allows Remote Attackers to Spoof AJP Requests

Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability

Improper Authentication in Apache Tomcat

Apache Tomcat - AJP secret compared in non-constant time