HomePentest-Tools.com Logo

Apache Tomcat Information Disclosure Vulnerability (Jun 2023) - Windows CVE-2023-34981

Severity
CVSSv3 Score
7.5
Vulnerability description

Apache Tomcat is prone to an information disclosure vulnerability.

Risk description

The fix for bug 66512 introduced a regression that was fixed as bug 66591. The regression meant that, if a response did not have any HTTP headers set, no AJP SEND_HEADERS message would be sent which in turn meant that at least one AJP based proxy (mod_proxy_ajp) would use the response headers from the previous request for the current request leading to an information leak.

Recommendation

Update to version 8.5.89, 9.0.75, 10.1.9, 11.0.0-M6 or later.

Codename
Not available
Detectable with
Network Scanner
Scan engine
OpenVAS
Exploitable with Sniper
No
CVE Published
Jun 21, 2023
Detection added at
Software Type
Not available
Vendor
Not available
Product
Not available