Multiple vulnerabilities in Apache Tomcat

Beschreibung

Multiple serious vulnerabilities have been found in Apache Tomcat. Malicious users can exploit these vulnerabilities to bypass security restrictions.

Below is a complete list of vulnerabilities:

1. A vulnerability related to security constraints defined by annotations of Servlets can be exploited remotely to bypass security restrictions;
2. A vulnerability related URL patterns can be exploited remotely to bypass security restrictions via URL pattern of „“(empty string).

Ursprüngliche Informationshinweise

• Apache Tomcat 8.x Security Vulnerabilities

• Apache Tomcat 9.x Security Vulnerabilities
• Apache Tomcat 7.x Security Vulnerabilities

CVE Liste

• CVE-2018-1304
  warning
• CVE-2018-1305
  warning

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com