NVD

Id
26530  
Name
CVE-2015-5345  
Description
The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence of a directory via a URL that lacks a trailing / (slash) character.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-02-24  
Modified Date
2016-12-05  
Seq
2015-5345  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140345 26530 CVE-2015-5345 SUSE-SU-2016:0769  View
140346 26530 CVE-2015-5345 SUSE-SU-2016:0822  View
140347 26530 CVE-2015-5345 SUSE-SU-2016:0839  View
140348 26530 CVE-2015-5345 openSUSE-SU-2016:0865  View
140349 26530 CVE-2015-5345 HPSBUX03561  View
140350 26530 CVE-2015-5345 http://packetstormsecurity.com/files/135892/Apache-Tomcat-Directory-Disclosure.html  View
140351 26530 CVE-2015-5345 RHSA-2016:1089  View
140352 26530 CVE-2015-5345 RHSA-2016:2045  View
140353 26530 CVE-2015-5345 20160222 [SECURITY] CVE-2015-5345 Apache Tomcat Directory disclosure  View
140354 26530 CVE-2015-5345 20160225 [CVE-2015-5345] Information disclosure vulnerability in Apache Tomcat  View
140355 26530 CVE-2015-5345 http://svn.apache.org/viewvc?view=revision&revision=1715206  View
140356 26530 CVE-2015-5345 http://svn.apache.org/viewvc?view=revision&revision=1715207  View
140357 26530 CVE-2015-5345 http://svn.apache.org/viewvc?view=revision&revision=1715213  View
140358 26530 CVE-2015-5345 http://svn.apache.org/viewvc?view=revision&revision=1715216  View
140359 26530 CVE-2015-5345 http://svn.apache.org/viewvc?view=revision&revision=1716882  View
140360 26530 CVE-2015-5345 http://svn.apache.org/viewvc?view=revision&revision=1716894  View
140361 26530 CVE-2015-5345 http://svn.apache.org/viewvc?view=revision&revision=1717209  View
140362 26530 CVE-2015-5345 http://svn.apache.org/viewvc?view=revision&revision=1717212  View
140363 26530 CVE-2015-5345 http://svn.apache.org/viewvc?view=revision&revision=1717216  View
140364 26530 CVE-2015-5345 http://tomcat.apache.org/security-6.html  View
140365 26530 CVE-2015-5345 http://tomcat.apache.org/security-7.html  View
140366 26530 CVE-2015-5345 http://tomcat.apache.org/security-8.html  View
140367 26530 CVE-2015-5345 http://tomcat.apache.org/security-9.html  View
140368 26530 CVE-2015-5345 DSA-3530  View
140369 26530 CVE-2015-5345 DSA-3552  View
140370 26530 CVE-2015-5345 DSA-3609  View
140371 26530 CVE-2015-5345 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
140372 26530 CVE-2015-5345 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html  View
140373 26530 CVE-2015-5345 http://www.qcsec.com/blog/CVE-2015-5345-apache-tomcat-vulnerability.html  View
140374 26530 CVE-2015-5345 83328  View
140375 26530 CVE-2015-5345 1035071  View
140376 26530 CVE-2015-5345 USN-3024-1  View
140377 26530 CVE-2015-5345 RHSA-2016:1087  View
140378 26530 CVE-2015-5345 RHSA-2016:1088  View
140379 26530 CVE-2015-5345 https://bto.bluecoat.com/security-advisory/sa118  View
140380 26530 CVE-2015-5345 https://bz.apache.org/bugzilla/show_bug.cgi?id=58765  View
140381 26530 CVE-2015-5345 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964  View
140382 26530 CVE-2015-5345 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442  View
140383 26530 CVE-2015-5345 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626  View
140384 26530 CVE-2015-5345 https://kc.mcafee.com/corporate/index?page=content&id=SB10156  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11603 JVNDB-2015-006923 Apache Tomcat の Mapper コンポーネントにおけるディレクトリの存在を特定される脆弱性 Apache Tomcat の Mapper コンポーネントは、セキュリティー制約およびフィルタを考慮する前にリダイレクト処理を行うため、ディレクトリの存在を特定される脆弱性が存在します。 CVE-2015-5345 82570 CVE-2015-5345 26530 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006923.html 2015-12-06 2016-12-05 View