| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.tomcat:tomcat | ≥ 6.0.30, < 6.0.35≥ 7.0, < 7.0.22 | 6.0.357.0.22 |
| tomcat | = 6.0.30= 6.0.31= 6.0.32= 6.0.33= 7.0.0= 7.0.1= 7.0.10= 7.0.11= 7.0.12= 7.0.13= 7.0.14= 7.0.15= 7.0.16= 7.0.17= 7.0.18= 7.0.19= 7.0.2= 7.0.20= 7.0.21= 7.0.3= 7.0.4= 7.0.5= 7.0.6= 7.0.7= 7.0.8= 7.0.9 |
Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free