Expected Behavior Violation in Apache Tomcat

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-5651 · ADVISORY
• apache/tomcat commit 494429c · WEB
• apache/tomcat commit 9233d9d · WEB
• web.archive.org/web/20170420113605/http://www.securitytracker.com/id/1038219 · WEB
• web.archive.org/web/20170417124228/http://www.securityfocus.com/bid/97544 · WEB
• security.netapp.com/advisory/ntap-20180614-0001 · WEB
• security.gentoo.org/glsa/201705-09 · WEB
• lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E · WEB
• lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E · WEB

org.apache.tomcat.embed:tomcat-embed-core のその他の脆弱性

• CVE-2026-68525緊急 9.1Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limi…
• CVE-2026-65905緊急 9.8Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made…
• CVE-2026-65637緊急 9.8Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from…
• CVE-2026-65182緊急 9.1Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a lo…
• CVE-2026-43515緊急 9.1Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This i…