CVE-2009-2696

概要

参考情報

• secunia.com/advisories/40813 · Vendor Advisory
• redhat.com/support/errata/RHSA-2010-0580.html
• vupen.com/english/advisories/2010/1986
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

tomcat のその他の脆弱性

• CVE-2026-73180中 6.8Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed af…
• CVE-2026-68763高 7.5Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is rese…
• CVE-2026-68569高 8.1Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be auth…
• CVE-2026-68525緊急 9.1Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limi…
• CVE-2026-66422高 8.1Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within t…