ghsa-p543-jg43-9pm5
Vulnerability from github
Published
2022-04-30 18:19
Modified
2024-02-12 18:18
Summary
Apache Tomcat may be started without proper security settings
Details
Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.
{
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat:tomcat"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.0b7"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2002-0493"
],
"database_specific": {
"cwe_ids": [
"CWE-276"
],
"github_reviewed": true,
"github_reviewed_at": "2024-02-12T18:18:48Z",
"nvd_published_at": "2002-08-12T04:00:00Z",
"severity": "HIGH"
},
"details": "Apache Tomcat may be started without proper security settings if errors are encountered while reading the `web.xml` file, which could allow attackers to bypass intended restrictions.",
"id": "GHSA-p543-jg43-9pm5",
"modified": "2024-02-12T18:18:48Z",
"published": "2022-04-30T18:19:20Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2002-0493"
},
{
"type": "PACKAGE",
"url": "https://github.com/apache/tomcat"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20020903071650/http://www.iss.net/security_center/static/9863.php"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=101709002410365\u0026w=2"
}
],
"schema_version": "1.4.0",
"severity": [],
"summary": "Apache Tomcat may be started without proper security settings"
}
Loading...