Every CVE Search/ Get API key

CVE-2008-0002

Apache Tomcat Sensitive Information Disclosure

5.8 MediumFix available

Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.

Exploit likelihood

5.02%Down 2.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.8

Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.

Record
CVE-2008-0002
CVSS 2.0
5.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:N
Updated
2026-11-02
CVE List No score

Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.

Record
CVE-2008-0002
Updated
2026-11-02
EUVDEUVD-2022-2675 No score

Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.

Record
EUVD-2022-2675
Updated
2026-11-03
GitHub AdvisoriesGHSA-5x5f-9r6q-q7mh No score

Apache Tomcat Sensitive Information Disclosure

Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.

Record
GHSA-5x5f-9r6q-q7mh
Weakness
CWE-200
Updated
2026-11-02
OSVGHSA-5x5f-9r6q-q7mh No score

Apache Tomcat Sensitive Information Disclosure

Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception.

Record
GHSA-5x5f-9r6q-q7mh
Weakness
CWE-200
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.apache.tomcat:tomcat
Maven
 6.0.0 up to 6.0.16
6.0.16
glassfish-javamail
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.4.0-0jpp.ep1.8
0:1.4.0-0jpp.ep1.8
hibernate3
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.2.1-1.patch02.1jpp.ep1.2.el4
0:3.2.1-1.patch02.1jpp.ep1.2.el4
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.2.1-1.patch02.1jpp.ep1.2.el4
0:3.2.1-1.patch02.1jpp.ep1.2.el4
hibernate3-entitymanager
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.2.1-1jpp.ep1.6.el4
0:3.2.1-1jpp.ep1.6.el4
hibernate3-entitymanager-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.2.1-1jpp.ep1.6.el4
0:3.2.1-1jpp.ep1.6.el4
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
hsqldb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:1.8.0.8-2.patch01.1jpp.ep1.1
1:1.8.0.8-2.patch01.1jpp.ep1.1
jacorb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.4
0:2.3.0-1jpp.ep1.4
Show 61 moreShow less
Affected packages
PackageAffectedFixed
jacorb-demo
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.4
0:2.3.0-1jpp.ep1.4
jacorb-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.4
0:2.3.0-1jpp.ep1.4
jacorb-manual
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.4
0:2.3.0-1jpp.ep1.4
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.5.5-1.CP01.0jpp.ep1.1.el4
0:1.5.5-1.CP01.0jpp.ep1.1.el4
jboss-cache
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4
0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.2.2-3.SP4.0jpp.ep1.1
0:2.2.2-3.SP4.0jpp.ep1.1
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.3.el4
0:1.2.1-1.ep1.3.el4
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.3.el4
0:1.2.1-1.ep1.3.el4
jbossas
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.3.el4
0:4.2.0-3.GA_CP02.ep1.3.el4
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.0-3.CP05.0jpp.ep1.1
0:2.0.0-3.CP05.0jpp.ep1.1
jbossws-jboss42
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-0jpp.ep1.2.el4
0:1.2.1-0jpp.ep1.2.el4
jcommon
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.12-1jpp.ep1.2.el4
0:1.0.12-1jpp.ep1.2.el4
jfreechart
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.9-1jpp.ep1.2.el4
0:1.0.9-1jpp.ep1.2.el4
jgroups
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:2.4.1-1.SP4.0jpp.ep1.2
1:2.4.1-1.SP4.0jpp.ep1.2
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.1.el4
0:4.2.0-3.GA_CP02.ep1.1.el4
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.1.el4
0:4.2.0-3.GA_CP02.ep1.1.el4
concurrent
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.3.4-7jpp.ep1.6.el4
0:1.3.4-7jpp.ep1.6.el4
glassfish-jaf
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.1.0-0jpp.ep1.10.el4
0:1.1.0-0jpp.ep1.10.el4
glassfish-javamail
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.4.0-0jpp.ep1.8
0:1.4.0-0jpp.ep1.8
glassfish-jsf
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.2_04-1.p02.0jpp.ep1.18
0:1.2_04-1.p02.0jpp.ep1.18
glassfish-jstl
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.2.0-0jpp.ep1.2
0:1.2.0-0jpp.ep1.2
hibernate3
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
hibernate3-annotations
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:3.2.1-1.patch02.1jpp.ep1.2.el4
0:3.2.1-1.patch02.1jpp.ep1.2.el4
hibernate3-annotations-javadoc
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:3.2.1-1.patch02.1jpp.ep1.2.el4
0:3.2.1-1.patch02.1jpp.ep1.2.el4
hibernate3-entitymanager
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:3.2.1-1jpp.ep1.6.el4
0:3.2.1-1jpp.ep1.6.el4
hibernate3-entitymanager-javadoc
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:3.2.1-1jpp.ep1.6.el4
0:3.2.1-1jpp.ep1.6.el4
hibernate3-javadoc
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
hsqldb
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 1:1.8.0.8-2.patch01.1jpp.ep1.1
1:1.8.0.8-2.patch01.1jpp.ep1.1
jacorb
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.4
0:2.3.0-1jpp.ep1.4
jboss-aop
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.5.5-1.CP01.0jpp.ep1.1.el4
0:1.5.5-1.CP01.0jpp.ep1.1.el4
jboss-cache
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4
0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4
jboss-common
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.2.1-0jpp.ep1.2
0:1.2.1-0jpp.ep1.2
jboss-remoting
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:2.2.2-3.SP4.0jpp.ep1.1
0:2.2.2-3.SP4.0jpp.ep1.1
jboss-seam
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.3.el4
0:1.2.1-1.ep1.3.el4
jboss-seam-docs
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.3.el4
0:1.2.1-1.ep1.3.el4
jbossas
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.3.el4
0:4.2.0-3.GA_CP02.ep1.3.el4
jbossweb
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:2.0.0-3.CP05.0jpp.ep1.1
0:2.0.0-3.CP05.0jpp.ep1.1
jbossws-wsconsume-impl
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:2.0.0-0jpp.ep1.3
0:2.0.0-0jpp.ep1.3
jbossxb
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.0.0-2.SP1.0jpp.ep1.2.el4
0:1.0.0-2.SP1.0jpp.ep1.2.el4
jcommon
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.0.12-1jpp.ep1.2.el4
0:1.0.12-1jpp.ep1.2.el4
jfreechart
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.0.9-1jpp.ep1.2.el4
0:1.0.9-1jpp.ep1.2.el4
jgroups
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 1:2.4.1-1.SP4.0jpp.ep1.2
1:2.4.1-1.SP4.0jpp.ep1.2
rh-eap-docs
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.1.el4
0:4.2.0-3.GA_CP02.ep1.1.el4
rh-eap-docs-examples
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.1.el4
0:4.2.0-3.GA_CP02.ep1.1.el4
wsdl4j
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.6.2-1jpp.ep1.8
0:1.6.2-1jpp.ep1.8
hibernate3
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1
0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1
0:3.2.1-1.patch02.1jpp.ep1.2.el5.1
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1
0:3.2.1-1.patch02.1jpp.ep1.2.el5.1
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1
0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1
jacorb
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.5.el5
0:2.3.0-1jpp.ep1.5.el5
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.5.5-1.CP01.0jpp.ep1.1.el5
0:1.5.5-1.CP01.0jpp.ep1.1.el5
jboss-cache
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el5
0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el5
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:2.2.2-3.SP4.0jpp.ep1.1.el5
0:2.2.2-3.SP4.0jpp.ep1.1.el5
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.3.el5
0:1.2.1-1.ep1.3.el5
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.3.el5
0:1.2.1-1.ep1.3.el5
jbossas
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-4.GA_CP02.ep1.3.el5.3
0:4.2.0-4.GA_CP02.ep1.3.el5.3
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.0-3.CP05.0jpp.ep1.1.el5
0:2.0.0-3.CP05.0jpp.ep1.1.el5
jcommon
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.12-1jpp.ep1.2.el5
0:1.0.12-1jpp.ep1.2.el5
jfreechart
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.9-1jpp.ep1.2.el5.1
0:1.0.9-1jpp.ep1.2.el5.1
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.1.el5.1
0:4.2.0-3.GA_CP02.ep1.1.el5.1
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.1.el5.1
0:4.2.0-3.GA_CP02.ep1.1.el5.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-0002 is a medium vulnerability (CVSS 5.8) in Apache Tomcat, published February 12, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.02%, the 92nd percentile. Fixed in org.apache.tomcat:tomcat 6.0.16.

References

Show 59 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open