ghsa-8g4f-fh7f-4fwh
Vulnerability from github
Published
2022-04-30 18:22
Modified
2024-02-12 20:18
Summary
Apache Tomcat Default Installation Reveals Sensitive Information
Details
The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.
{
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat:tomcat"
},
"ranges": [
{
"events": [
{
"introduced": "4.0.0"
},
{
"fixed": "4.1.0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat:tomcat"
},
"ranges": [
{
"events": [
{
"introduced": "3.0"
},
{
"fixed": "3.3a"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2002-2006"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": true,
"github_reviewed_at": "2024-02-12T20:18:08Z",
"nvd_published_at": "2002-12-31T05:00:00Z",
"severity": "LOW"
},
"details": "The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.",
"id": "GHSA-8g4f-fh7f-4fwh",
"modified": "2024-02-12T20:18:08Z",
"published": "2022-04-30T18:22:18Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2002-2006"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@\u003cdev.tomcat.apache.org\u003e"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@\u003cdev.tomcat.apache.org\u003e"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@\u003cdev.tomcat.apache.org\u003e"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20020602051837/http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20021026082659/http://online.securityfocus.com/bid/4575"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20030104173336/http://www.iss.net/security_center/static/8932.php"
},
{
"type": "WEB",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1"
},
{
"type": "WEB",
"url": "http://tomcat.apache.org/security-4.html"
}
],
"schema_version": "1.4.0",
"severity": [],
"summary": "Apache Tomcat Default Installation Reveals Sensitive Information"
}
Loading...