CVEvulnerability

CVE-2008-4308

2.6 LOW Published 2009-02-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-02-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request.

Affected configurations

• apache tomcat 4.1.32 • apache tomcat 4.1.33 • apache tomcat 4.1.34 • apache tomcat 5.5.10 • apache tomcat 5.5.11 • apache tomcat 5.5.12 • apache tomcat 5.5.13 • apache tomcat 5.5.14 • apache tomcat 5.5.15 • apache tomcat 5.5.16 • apache tomcat 5.5.17 • apache tomcat 5.5.18 • apache tomcat 5.5.19 • apache tomcat 5.5.20

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References