CVE-2013-2071
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2.6 LowFix available
java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.
Exploit likelihood
6.50%Up 1.3 points since Feb 4, 2022
What each source reports
NVD Score used
java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.
- Record
CVE-2013-2071- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.
- Record
CVE-2013-2071- Updated
- 2026-11-02
EUVDEUVD-2022-2217 No score
java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.
- Record
EUVD-2022-2217- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3p5r-7cw3-2m67 No score
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.
- Record
GHSA-3p5r-7cw3-2m67- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVGHSA-3p5r-7cw3-2m67 No score
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.
- Record
GHSA-3p5r-7cw3-2m67- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVMGASA-2013-0191 No score
Updated tomcat7 packages fix CVE-2013-2071
java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes (CVE-2013-2071).
- Record
MGASA-2013-0191- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.tomcat:tomcatMaven |
7.0.0 up to 7.0.40 | 7.0.40 |
tomcat7Debian:7 From an advisory covering 6 CVEs |
before 7.0.28-4+deb7u1, plus listed versions 7.0.28-4 |
7.0.28-4+deb7u1 |
org.apache.tomcat:tomcatMaven |
7.0.0 up to 7.0.40, plus listed versions 7.0.357.0.377.0.39 |
7.0.40 |
tomcatMageia:2 |
before 7.0.41-3.mga2 | 7.0.41-3.mga2 |
tomcatMageia:3 |
before 7.0.41-4.mga3 | 7.0.41-4.mga3 |
apache-commons-daemon-eap6Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 1:1.0.15-4.redhat_1.ep6.el5 | 1:1.0.15-4.redhat_1.ep6.el5 |
apache-commons-daemon-jsvc-eap6Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 1:1.0.15-1.redhat_1.ep6.el5 | 1:1.0.15-1.redhat_1.ep6.el5 |
apache-commons-pool-eap6Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:1.6-6.redhat_4.ep6.el5 | 0:1.6-6.redhat_4.ep6.el5 |
apache-commons-pool-tomcat-eap6Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:1.6-6.redhat_4.ep6.el5 | 0:1.6-6.redhat_4.ep6.el5 |
dom4jRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:1.6.1-19.redhat_5.ep6.el5 | 0:1.6.1-19.redhat_5.ep6.el5 |
Show 80 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ecj3Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 1:3.7.2-6.redhat_1.ep6.el5 | 1:3.7.2-6.redhat_1.ep6.el5 |
httpdRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:2.2.22-23.ep6.el5 | 0:2.2.22-23.ep6.el5 |
httpd-develRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:2.2.22-23.ep6.el5 | 0:2.2.22-23.ep6.el5 |
httpd-manualRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:2.2.22-23.ep6.el5 | 0:2.2.22-23.ep6.el5 |
httpd-toolsRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:2.2.22-23.ep6.el5 | 0:2.2.22-23.ep6.el5 |
mod_clusterRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:1.2.4-1.Final_redhat_1.ep6.el5 | 0:1.2.4-1.Final_redhat_1.ep6.el5 |
mod_cluster-demoRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:1.2.4-1.Final_redhat_1.ep6.el5 | 0:1.2.4-1.Final_redhat_1.ep6.el5 |
mod_cluster-nativeRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:1.2.4-1.Final.redhat_1.ep6.el5 | 0:1.2.4-1.Final.redhat_1.ep6.el5 |
mod_cluster-tomcat6Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:1.2.4-1.Final_redhat_1.ep6.el5 | 0:1.2.4-1.Final_redhat_1.ep6.el5 |
mod_cluster-tomcat7Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:1.2.4-1.Final_redhat_1.ep6.el5 | 0:1.2.4-1.Final_redhat_1.ep6.el5 |
mod_jkRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:1.2.37-2.redhat_1.ep6.el5 | 0:1.2.37-2.redhat_1.ep6.el5 |
mod_jk-ap22Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:1.2.37-2.redhat_1.ep6.el5 | 0:1.2.37-2.redhat_1.ep6.el5 |
mod_jk-manualRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:1.2.37-2.redhat_1.ep6.el5 | 0:1.2.37-2.redhat_1.ep6.el5 |
mod_sslRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 1:2.2.22-23.ep6.el5 | 1:2.2.22-23.ep6.el5 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:1.1.27-4.redhat_1.ep6.el5 | 0:1.1.27-4.redhat_1.ep6.el5 |
tomcat6Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:6.0.37-8_patch_01.ep6.el5 | 0:6.0.37-8_patch_01.ep6.el5 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:6.0.37-8_patch_01.ep6.el5 | 0:6.0.37-8_patch_01.ep6.el5 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:6.0.37-8_patch_01.ep6.el5 | 0:6.0.37-8_patch_01.ep6.el5 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:6.0.37-8_patch_01.ep6.el5 | 0:6.0.37-8_patch_01.ep6.el5 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:6.0.37-8_patch_01.ep6.el5 | 0:6.0.37-8_patch_01.ep6.el5 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:6.0.37-8_patch_01.ep6.el5 | 0:6.0.37-8_patch_01.ep6.el5 |
tomcat6-libRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:6.0.37-8_patch_01.ep6.el5 | 0:6.0.37-8_patch_01.ep6.el5 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:6.0.37-8_patch_01.ep6.el5 | 0:6.0.37-8_patch_01.ep6.el5 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:6.0.37-8_patch_01.ep6.el5 | 0:6.0.37-8_patch_01.ep6.el5 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:6.0.37-8_patch_01.ep6.el5 | 0:6.0.37-8_patch_01.ep6.el5 |
tomcat7Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:7.0.40-9_patch_01.ep6.el5 | 0:7.0.40-9_patch_01.ep6.el5 |
tomcat7-admin-webappsRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:7.0.40-9_patch_01.ep6.el5 | 0:7.0.40-9_patch_01.ep6.el5 |
tomcat7-docs-webappRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:7.0.40-9_patch_01.ep6.el5 | 0:7.0.40-9_patch_01.ep6.el5 |
tomcat7-el-1.0-apiRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:7.0.40-9_patch_01.ep6.el5 | 0:7.0.40-9_patch_01.ep6.el5 |
tomcat7-javadocRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:7.0.40-9_patch_01.ep6.el5 | 0:7.0.40-9_patch_01.ep6.el5 |
tomcat7-jsp-2.2-apiRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:7.0.40-9_patch_01.ep6.el5 | 0:7.0.40-9_patch_01.ep6.el5 |
tomcat7-libRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:7.0.40-9_patch_01.ep6.el5 | 0:7.0.40-9_patch_01.ep6.el5 |
tomcat7-log4jRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:7.0.40-9_patch_01.ep6.el5 | 0:7.0.40-9_patch_01.ep6.el5 |
tomcat7-servlet-3.0-apiRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:7.0.40-9_patch_01.ep6.el5 | 0:7.0.40-9_patch_01.ep6.el5 |
tomcat7-webappsRed Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 5 CVEs |
before 0:7.0.40-9_patch_01.ep6.el5 | 0:7.0.40-9_patch_01.ep6.el5 |
apache-commons-daemon-eap6Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 1:1.0.15-4.redhat_1.ep6.el6 | 1:1.0.15-4.redhat_1.ep6.el6 |
apache-commons-daemon-jsvc-eap6Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 1:1.0.15-1.redhat_1.ep6.el6 | 1:1.0.15-1.redhat_1.ep6.el6 |
apache-commons-daemon-jsvc-eap6-debuginfoRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 1:1.0.15-1.redhat_1.ep6.el6 | 1:1.0.15-1.redhat_1.ep6.el6 |
apache-commons-pool-eap6Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.6-6.redhat_4.ep6.el6 | 0:1.6-6.redhat_4.ep6.el6 |
apache-commons-pool-tomcat-eap6Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.6-6.redhat_4.ep6.el6 | 0:1.6-6.redhat_4.ep6.el6 |
dom4jRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.6.1-19.redhat_5.ep6.el6 | 0:1.6.1-19.redhat_5.ep6.el6 |
ecj3Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 1:3.7.2-6.redhat_1.ep6.el6 | 1:3.7.2-6.redhat_1.ep6.el6 |
httpdRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:2.2.22-23.ep6.el6 | 0:2.2.22-23.ep6.el6 |
httpd-debuginfoRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:2.2.22-23.ep6.el6 | 0:2.2.22-23.ep6.el6 |
httpd-develRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:2.2.22-23.ep6.el6 | 0:2.2.22-23.ep6.el6 |
httpd-manualRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:2.2.22-23.ep6.el6 | 0:2.2.22-23.ep6.el6 |
httpd-toolsRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:2.2.22-23.ep6.el6 | 0:2.2.22-23.ep6.el6 |
mod_clusterRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.2.4-1.Final_redhat_1.ep6.el6 | 0:1.2.4-1.Final_redhat_1.ep6.el6 |
mod_cluster-demoRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.2.4-1.Final_redhat_1.ep6.el6 | 0:1.2.4-1.Final_redhat_1.ep6.el6 |
mod_cluster-nativeRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.2.4-1.Final.redhat_1.ep6.el6 | 0:1.2.4-1.Final.redhat_1.ep6.el6 |
mod_cluster-native-debuginfoRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.2.4-1.Final.redhat_1.ep6.el6 | 0:1.2.4-1.Final.redhat_1.ep6.el6 |
mod_cluster-tomcat6Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.2.4-1.Final_redhat_1.ep6.el6 | 0:1.2.4-1.Final_redhat_1.ep6.el6 |
mod_cluster-tomcat7Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.2.4-1.Final_redhat_1.ep6.el6 | 0:1.2.4-1.Final_redhat_1.ep6.el6 |
mod_jkRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.2.37-2.redhat_1.ep6.el6 | 0:1.2.37-2.redhat_1.ep6.el6 |
mod_jk-ap22Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.2.37-2.redhat_1.ep6.el6 | 0:1.2.37-2.redhat_1.ep6.el6 |
mod_jk-debuginfoRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.2.37-2.redhat_1.ep6.el6 | 0:1.2.37-2.redhat_1.ep6.el6 |
mod_jk-manualRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.2.37-2.redhat_1.ep6.el6 | 0:1.2.37-2.redhat_1.ep6.el6 |
mod_sslRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 1:2.2.22-23.ep6.el6 | 1:2.2.22-23.ep6.el6 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.1.27-4.redhat_1.ep6.el6 | 0:1.1.27-4.redhat_1.ep6.el6 |
tomcat-native-debuginfoRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:1.1.27-4.redhat_1.ep6.el6 | 0:1.1.27-4.redhat_1.ep6.el6 |
tomcat6Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:6.0.37-10_patch_01.ep6.el6 | 0:6.0.37-10_patch_01.ep6.el6 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:6.0.37-10_patch_01.ep6.el6 | 0:6.0.37-10_patch_01.ep6.el6 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:6.0.37-10_patch_01.ep6.el6 | 0:6.0.37-10_patch_01.ep6.el6 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:6.0.37-10_patch_01.ep6.el6 | 0:6.0.37-10_patch_01.ep6.el6 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:6.0.37-10_patch_01.ep6.el6 | 0:6.0.37-10_patch_01.ep6.el6 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:6.0.37-10_patch_01.ep6.el6 | 0:6.0.37-10_patch_01.ep6.el6 |
tomcat6-libRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:6.0.37-10_patch_01.ep6.el6 | 0:6.0.37-10_patch_01.ep6.el6 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:6.0.37-10_patch_01.ep6.el6 | 0:6.0.37-10_patch_01.ep6.el6 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:6.0.37-10_patch_01.ep6.el6 | 0:6.0.37-10_patch_01.ep6.el6 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:6.0.37-10_patch_01.ep6.el6 | 0:6.0.37-10_patch_01.ep6.el6 |
tomcat7Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:7.0.40-5_patch_01.ep6.el6 | 0:7.0.40-5_patch_01.ep6.el6 |
tomcat7-admin-webappsRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:7.0.40-5_patch_01.ep6.el6 | 0:7.0.40-5_patch_01.ep6.el6 |
tomcat7-docs-webappRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:7.0.40-5_patch_01.ep6.el6 | 0:7.0.40-5_patch_01.ep6.el6 |
tomcat7-el-1.0-apiRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:7.0.40-5_patch_01.ep6.el6 | 0:7.0.40-5_patch_01.ep6.el6 |
tomcat7-javadocRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:7.0.40-5_patch_01.ep6.el6 | 0:7.0.40-5_patch_01.ep6.el6 |
tomcat7-jsp-2.2-apiRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:7.0.40-5_patch_01.ep6.el6 | 0:7.0.40-5_patch_01.ep6.el6 |
tomcat7-libRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:7.0.40-5_patch_01.ep6.el6 | 0:7.0.40-5_patch_01.ep6.el6 |
tomcat7-log4jRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:7.0.40-5_patch_01.ep6.el6 | 0:7.0.40-5_patch_01.ep6.el6 |
tomcat7-servlet-3.0-apiRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:7.0.40-5_patch_01.ep6.el6 | 0:7.0.40-5_patch_01.ep6.el6 |
tomcat7-webappsRed Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 5 CVEs |
before 0:7.0.40-5_patch_01.ep6.el6 | 0:7.0.40-5_patch_01.ep6.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2071 is a low vulnerability (CVSS 2.6) in Apache Tomcat, published June 1, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.50%, the 93rd percentile. Fixed in org.apache.tomcat:tomcat 7.0.40.
References
svn.apache.org/viewvc?view=revision&revision=1471372
issues.apache.org/bugzilla/show_bug.cgi?id=54178
lists.fedoraproject.org/pipermail/package-announce/2013-May/105855.html
tomcat.apache.org/security-7.html
Show 38 moreShow less
archives.neohapsis.com/archives/bugtraq/2013-05/0040.html
ubuntu.com/usn/USN-1841-1
securityfocus.com/bid/59798
oracle.com/technetwork/topics/security/cpujan2014-1972949.html
lists.opensuse.org/opensuse-updates/2013-08/msg00013.html
marc.info?l=bugtraq&m=139344248911289&w=2
nvd.nist.gov/vuln/detail/CVE-2013-2071
github.com/advisories/GHSA-3p5r-7cw3-2m67
advisories.mageia.org/MGASA-2013-0191.html
bugs.mageia.org/show_bug.cgi?id=10200
access.redhat.com/errata/RHSA-2013:1011
bugzilla.redhat.com/show_bug.cgi?id=915883
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1011.json
cve.org/CVERecord?id=CVE-2012-3499