| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| org.apache.tomcat.embed:tomcat-embed-core | ≥ 7.0.0, < 7.0.85≥ 8.5.0, < 8.5.28≥ 9.0.0M1, < 9.0.5 | 7.0.858.5.289.0.5 |
| tomcat | = 8.0.0= 9.0.0= 9.0.1= 9.0.2= 9.0.3= 9.0.4≥ 7.0.0, ≤ 7.0.84≥ 8.0.0, ≤ 8.0.49≥ 8.5.0, ≤ 8.5.27 | |
| fusion middleware | = 12.2.1.3.0 | |
| managed file transfer | = 12.1.3.0.0= 12.2.1.3.0 | |
| micros relate crm software | = 11.4 |
Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was possible - depending on the order Servlets were loaded - for some security constraints not to be applied. This could have exposed resources to users who were not authorised to access them.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン