NVD

Id
12690  
Name
CVE-2010-1157  
Description
Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server"s hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-04-23  
Modified Date
2016-08-22  
Seq
2010-1157  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
69698 12690 CVE-2010-1157 APPLE-SA-2011-10-12-3  View
69699 12690 CVE-2010-1157 SUSE-SR:2010:017  View
69700 12690 CVE-2010-1157 SSRT100203  View
69701 12690 CVE-2010-1157 SSRT100825  View
69702 12690 CVE-2010-1157 HPSBUX02860  View
69703 12690 CVE-2010-1157 HPSBST02955  View
69704 12690 CVE-2010-1157 oval:org.mitre.oval:def:19492  View
69705 12690 CVE-2010-1157 http://support.apple.com/kb/HT5002  View
69706 12690 CVE-2010-1157 http://svn.apache.org/viewvc?view=revision&revision=936540  View
69707 12690 CVE-2010-1157 http://svn.apache.org/viewvc?view=revision&revision=936541  View
69708 12690 CVE-2010-1157 http://tomcat.apache.org/security-5.html  View
69709 12690 CVE-2010-1157 http://tomcat.apache.org/security-6.html  View
69710 12690 CVE-2010-1157 DSA-2207  View
69711 12690 CVE-2010-1157 MDVSA-2010:176  View
69712 12690 CVE-2010-1157 MDVSA-2010:177  View
69713 12690 CVE-2010-1157 RHSA-2011:0896  View
69714 12690 CVE-2010-1157 RHSA-2011:0897  View
69715 12690 CVE-2010-1157 20100421 [SECURITY] CVE-2010-1157: Apache Tomcat information disclosure vulnerability  View
69716 12690 CVE-2010-1157 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
69717 12690 CVE-2010-1157 39635  View
69718 12690 CVE-2010-1157 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
69719 12690 CVE-2010-1157 http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
69720 12690 CVE-2010-1157 ADV-2010-0980  View
69721 12690 CVE-2010-1157 ADV-2010-3056  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35673 JVNDB-2010-001453 Apache Tomcat における BASIC または DIGEST 認証の処理に関する脆弱性 Apache Tomcat には、BASIC または DIGEST 認証の処理に関して不備があるため、サーバのホスト名、または IP アドレスを取得される脆弱性が存在します。 CVE-2010-1157 43737 CVE-2010-1157 12690 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001453.html 2010-04-23 2015-03-25 View