Beveiligingsadvies

CVE-2011-1183

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-04-08 15:00:00

Laatst bijgewerkt 2024-08-06 22:21:33

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass intended access restrictions via HTTP requests to a meta-data complete web application. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1088 and CVE-2011-1419.

← Alle CVE's bekijken Bekijk op cve.org ↗