Поиск уязвимостей
Количество 17
Количество 17
CVE-2023-28708
When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel. Older, EOL versions may also be affected.
CVE-2023-28708
When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel. Older, EOL versions may also be affected.
CVE-2023-28708
When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel. Older, EOL versions may also be affected.
CVE-2023-28708
When using the RemoteIpFilter with requests received from a reverse ...
SUSE-SU-2023:1672-1
Security update for tomcat
SUSE-SU-2023:1669-1
Security update for tomcat
GHSA-2c9m-w27f-53rm
Apache Tomcat vulnerable to Unprotected Transport of Credentials
BDU:2025-10838
Уязвимость сервера приложений Apache Tomcat, связанная с отсутствием флага «Secure» в файлах cookie сеанса, позволяющая нарушителю получить доступ к конфиденциальной информации
SUSE-SU-2023:1769-1
Security update for tomcat
ROS-20250828-03
Уязвимость tomcat
ELSA-2023-7065
ELSA-2023-7065: tomcat security and bug fix update (MODERATE)
ELSA-2023-6570
ELSA-2023-6570: tomcat security and bug fix update (MODERATE)
ALT-PU-2024-4975
ALT-PU-2024-4975: package `tomcat10` update to version 10.1.20-alt1_jvm17.p10
ALT-PU-2024-4687
ALT-PU-2024-4687: package `tomcat10` update to version 10.1.20-alt1_jvm17
ALT-PU-2023-8058
ALT-PU-2023-8058: package `tomcat` update to version 9.0.83-alt1_1jpp11
ALT-PU-2025-2379
ALT-PU-2025-2379: package `tomcat` update to version 9.0.98-alt0_1jpp17.p10.1
SUSE-SU-2026:1058-1
Security update for tomcat
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-28708 When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel. Older, EOL versions may also be affected. | CVSS3: 4.3 | 2% Низкий | больше 3 лет назад |
 | CVE-2023-28708 When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel. Older, EOL versions may also be affected. | CVSS3: 4.3 | 2% Низкий | больше 3 лет назад |
 | CVE-2023-28708 When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel. Older, EOL versions may also be affected. | CVSS3: 4.3 | 2% Низкий | больше 3 лет назад |
| CVE-2023-28708 When using the RemoteIpFilter with requests received from a reverse ... | CVSS3: 4.3 | 2% Низкий | больше 3 лет назад |
 | SUSE-SU-2023:1672-1 Security update for tomcat | 2% Низкий | больше 3 лет назад | |
| SUSE-SU-2023:1669-1 Security update for tomcat | 2% Низкий | больше 3 лет назад | |
| GHSA-2c9m-w27f-53rm Apache Tomcat vulnerable to Unprotected Transport of Credentials | CVSS3: 4.3 | 2% Низкий | больше 3 лет назад |
 | BDU:2025-10838 Уязвимость сервера приложений Apache Tomcat, связанная с отсутствием флага «Secure» в файлах cookie сеанса, позволяющая нарушителю получить доступ к конфиденциальной информации | CVSS3: 4.3 | 2% Низкий | больше 3 лет назад |
| SUSE-SU-2023:1769-1 Security update for tomcat | больше 3 лет назад | ||
 | ROS-20250828-03 Уязвимость tomcat | CVSS3: 4.3 | 2% Низкий | около 1 года назад |
| ELSA-2023-7065 ELSA-2023-7065: tomcat security and bug fix update (MODERATE) | почти 3 года назад | ||
| ELSA-2023-6570 ELSA-2023-6570: tomcat security and bug fix update (MODERATE) | почти 3 года назад | ||
| ALT-PU-2024-4975 ALT-PU-2024-4975: package `tomcat10` update to version 10.1.20-alt1_jvm17.p10 | CVSS3: 7.5 | больше 2 лет назад | |
| ALT-PU-2024-4687 ALT-PU-2024-4687: package `tomcat10` update to version 10.1.20-alt1_jvm17 | CVSS3: 7.5 | больше 2 лет назад | |
| ALT-PU-2023-8058 ALT-PU-2023-8058: package `tomcat` update to version 9.0.83-alt1_1jpp11 | CVSS3: 7.5 | почти 3 года назад | |
| ALT-PU-2025-2379 ALT-PU-2025-2379: package `tomcat` update to version 9.0.98-alt0_1jpp17.p10.1 | CVSS3: 9.8 | больше 1 года назад | |
| SUSE-SU-2026:1058-1 Security update for tomcat | 8 месяцев назад |
Уязвимостей на страницу