GitHub Advisoryadvisory · Maven

GHSA-p543-jg43-9pm5 Apache Tomcat may be started without proper security settings

HIGH Published 2022-04-30 Modified 2024-02-12 Official page ↗
Aliases
CVE-2002-0493
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
High
Weaknesses
CWE-276
Reviewed
2024-02-12

Affected packages

• Maven org.apache.tomcat:tomcat: < 4.0b7 → fixed in 4.0b7

Description

Apache Tomcat may be started without proper security settings if errors are encountered while reading the `web.xml` file, which could allow attackers to bypass intended restrictions.

Related

Alias · CVE (1)

  • CVE-2002-0493 Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow… vulnerability

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References