Kaspersky Threats

KLA11327
SB vulnerability in Apache Tomcat

Updated: 10/16/2018

CVSS ?	5.0
Detect date ?	10/03/2018
Severity ?	Critical
Description	A vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability via specially crafted URI to bypass security restrictions.
Affected products	Apache Tomcat 8.0.x Apache Tomcat 8.5.x earlier than 8.5.34 Apache Tomcat 7.x earlier than 7.0.91 Apache Tomcat 9. earlier than 9.0.12
Solution	Update to the latest version
Original advisories	Apache Tomcat 7.x vulnerabilities Apache Tomcat 8.x vulnerabilities Apache Tomcat 9.x vulnerabilities
Impacts ?	SB [?]
Related products	Apache Tomcat
CVE-IDS ?	CVE-2018-11784