GitHub Advisoryadvisory · Maven

GHSA-5x5f-9r6q-q7mh Apache Tomcat Sensitive Information Disclosure

MEDIUM Published 2022-05-01 Modified 2024-02-09 Official page ↗
Aliases
CVE-2008-0002
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-200
Reviewed
2024-02-09

Affected packages

• Maven org.apache.tomcat:tomcat: >= 6.0.0, < 6.0.16 → fixed in 6.0.16

Description

Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.

Related

Alias · CVE (1)

  • CVE-2008-0002 Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References