libtomcat8-java vulnerabilities (TuxCare)
51 vulnerabilities.
-
libtomcat8-javaTuxCare Apache Tomcat: Security constraints for default servlet ignored method 6.5 Medium -
libtomcat8-javaTuxCare Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind 7.3 High -
libtomcat8-javaTuxCare Apache Tomcat: Security constraints not correctly applied 9.1 Critical -
libtomcat8-javaTuxCare Apache Tomcat: AJP secret compared in non-constant time 3.7 Low -
libtomcat8-javaTuxCare Apache Tomcat: LockOutRealm treats user names as case-sensitive 7.5 High -
libtomcat8-javaTuxCare Apache Tomcat: Digest authenticator will authenticate any unknown user 9.8 Critical -
libtomcat8-javaTuxCare Apache Tomcat: HTTP/2 request headers not validated 9.8 Critical -
libtomcat8-javaTuxCare Apache Tomcat: WebSocket authentication header exposure 7.3 High -
libtomcat8-javaTuxCare Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling 7.5 High -
libtomcat8-javaTuxCare Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default 7.5 High -
libtomcat8-javaTuxCare Apache Tomcat: Bypass of rules in Rewrite Valve 9.8 Critical -
libtomcat8-javaTuxCare Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT 9.8 Critical -
libtomcat8-javaTuxCare Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete 9.8 Critical -
libtomcat8-javaTuxCare Apache Tomcat: WebSocket DoS with incomplete closing handshake 6.3 Medium -
libtomcat8-javaTuxCare Apache Tomcat: Leaking of unrelated request bodies in default error page 5.3 Medium -
libtomcat8-javaTuxCare Apache Tomcat: HTTP request smuggling via malformed trailer headers 7.5 High -
libtomcat8-javaTuxCare Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows 5.9 Medium -
libtomcat8-javaTuxCare Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests 5.3 Medium -
libtomcat8-javaTuxCare Apache Tomcat: Open redirect with FORM authentication 6.1 Medium -
libtomcat8-javaTuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
libtomcat8-javaTuxCare Apache Tomcat: AJP response header mix-up 7.5 High -
libtomcat8-javaTuxCare Apache Tomcat: Fix for CVE-2023-24998 is incomplete 7.5 High -
libtomcat8-javaTuxCare Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations 4.3 Medium -
libtomcat8-javaTuxCare Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts 7.5 High -
libtomcat8-javaTuxCare Apache Tomcat: JsonErrorReportValve escaping 7.5 High -
libtomcat8-javaTuxCare Apache Tomcat request smuggling via malformed content-length 7.5 High -
libtomcat8-javaTuxCare Apache Tomcat: Information disclosure 3.7 Low -
libtomcat8-javaTuxCare XSS in examples web application 6.1 Medium -
libtomcat8-javaTuxCare EncryptInterceptor does not provide complete protection on insecure networks 7.5 High -
libtomcat8-javaTuxCare Local privilege escalation with FileStore 7.0 High -
libtomcat8-javaTuxCare DoS via memory leak with WebSocket connections 7.5 High -
libtomcat8-javaTuxCare Apache Tomcat DoS with unexpected TLS packet 7.5 High -
libtomcat8-javaTuxCare Incorrect Transfer-Encoding handling with HTTP/1.0 5.3 Medium -
libtomcat8-javaTuxCare Auth weakness in JNDIRealm 6.5 Medium -
libtomcat8-javaTuxCare DoS after non-blocking IO error 7.5 High -
libtomcat8-javaTuxCare Incomplete fix for CVE-2020-9484 7.0 High -
libtomcat8-javaTuxCare Apache Tomcat h2c request mix-up 7.5 High -
libtomcat8-javaTuxCare Apache Tomcat information disclosure 5.9 Medium -
libtomcat8-javaTuxCare Apache Tomcat: Request header mix-up between HTTP/2 streams 7.5 High -
libtomcat8-javaTuxCare Response mix-up with WebSocket concurrent send and close 8.6 High -
libtomcat8-javaTuxCare Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 4.3 Medium -
libtomcat8-javaTuxCare Infinite Loop in Apache Tomcat 7.5 High -
libtomcat8-javaTuxCare Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat 7.5 High -
libtomcat8-javaTuxCare Uncontrolled Resource Consumption in Apache Tomcat 7.5 High -
libtomcat8-javaTuxCare Potential remote code execution in Apache Tomcat 7.0 High -
libtomcat8-javaTuxCare Improper Privilege Management in Tomcat 9.8 Critical -
libtomcat8-javaTuxCare Potential HTTP request smuggling in Apache Tomcat 4.8 Medium -
libtomcat8-javaTuxCare Insufficiently Protected Credentials in Apache Tomcat 7.0 High -
libtomcat8-javaTuxCare In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack 7.5 High -
libtomcat8-javaTuxCare Improper Locking in Apache Tomcat 7.5 High - Show olderLoading…