Beveiligingsadvies

CVE-2015-5351

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-02-25 01:00:00

Laatst bijgewerkt 2024-08-06 06:41:09

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.

← Alle CVE's bekijken Bekijk op cve.org ↗