Apache Tomcat Sensitive Information Disclosure

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2008-0002 · ADVISORY
• apache/tomcat · PACKAGE
• web.archive.org/web/20080214133036/http://secunia.com/advisories/28915 · WEB
• web.archive.org/web/20080715062302/http://secunia.com/advisories/29711 · WEB
• web.archive.org/web/20080724052339/http://secunia.com/advisories/28834 · WEB
• web.archive.org/web/20081012021650/http://www.securityfocus.com/bid/27703 · WEB
• web.archive.org/web/20081013050642/http://secunia.com/advisories/32222 · WEB
• web.archive.org/web/20081120062646/http://securityreason.com/securityalert/3638 · WEB
• web.archive.org/web/20081121133027/http://www.securityfocus.com/archive/1/487812/100/0/threaded · WEB
• web.archive.org/web/20091125140215/http://secunia.com/advisories/37460

org.apache.tomcat:tomcat のその他の脆弱性

• CVE-2026-68525緊急 9.1Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limi…
• CVE-2026-65905緊急 9.8Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made…
• CVE-2026-65182緊急 9.1Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a lo…
• CVE-2026-43515緊急 9.1Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This i…
• CVE-2026-43514低 3.7Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 th…