Количество 13
Количество 13
GHSA-767j-jfh2-jvrc
Potential HTTP request smuggling in Apache Tomcat

CVE-2019-17569
The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.

CVE-2019-17569
The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.

CVE-2019-17569
The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.
CVE-2019-17569
The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8 ...

BDU:2021-01013
Уязвимость сервера приложений Apache Tomcat, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю отправить скрытый HTTP-запрос (атака типа HTTP Request Smuggling)

BDU:2020-04511
Уязвимость сервера приложений Apache Tomcat, связанная с непоследовательной интерпретацией HTTP-запросов, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации

openSUSE-SU-2020:0345-1
Security update for tomcat

SUSE-SU-2020:0631-1
Security update for tomcat

SUSE-SU-2020:0598-1
Security update for tomcat

SUSE-SU-2020:1498-1
Security update for tomcat

SUSE-SU-2020:1497-1
Security update for tomcat

SUSE-SU-2020:0632-1
Security update for tomcat
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
GHSA-767j-jfh2-jvrc Potential HTTP request smuggling in Apache Tomcat | CVSS3: 4.8 | 10% Низкий | больше 5 лет назад | |
![]() | CVE-2019-17569 The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely. | CVSS3: 4.8 | 10% Низкий | больше 5 лет назад |
![]() | CVE-2019-17569 The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely. | CVSS3: 4.3 | 10% Низкий | больше 5 лет назад |
![]() | CVE-2019-17569 The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely. | CVSS3: 4.8 | 10% Низкий | больше 5 лет назад |
CVE-2019-17569 The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8 ... | CVSS3: 4.8 | 10% Низкий | больше 5 лет назад | |
![]() | BDU:2021-01013 Уязвимость сервера приложений Apache Tomcat, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю отправить скрытый HTTP-запрос (атака типа HTTP Request Smuggling) | CVSS3: 4.8 | 10% Низкий | больше 5 лет назад |
![]() | BDU:2020-04511 Уязвимость сервера приложений Apache Tomcat, связанная с непоследовательной интерпретацией HTTP-запросов, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации | CVSS3: 4.8 | 10% Низкий | больше 5 лет назад |
![]() | openSUSE-SU-2020:0345-1 Security update for tomcat | больше 5 лет назад | ||
![]() | SUSE-SU-2020:0631-1 Security update for tomcat | больше 5 лет назад | ||
![]() | SUSE-SU-2020:0598-1 Security update for tomcat | больше 5 лет назад | ||
![]() | SUSE-SU-2020:1498-1 Security update for tomcat | около 5 лет назад | ||
![]() | SUSE-SU-2020:1497-1 Security update for tomcat | около 5 лет назад | ||
![]() | SUSE-SU-2020:0632-1 Security update for tomcat | больше 5 лет назад |
Уязвимостей на страницу