NVD

Id
40174  
Name
CVE-2013-4590  
Description
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2014-02-26  
Modified Date
2017-01-06  
Seq
2013-4590  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204455 40174 CVE-2013-4590 http://advisories.mageia.org/MGASA-2014-0148.html  View
204456 40174 CVE-2013-4590 HPSBOV03503  View
204457 40174 CVE-2013-4590 http://svn.apache.org/viewvc?view=revision&revision=1549528  View
204458 40174 CVE-2013-4590 http://svn.apache.org/viewvc?view=revision&revision=1549529  View
204459 40174 CVE-2013-4590 http://svn.apache.org/viewvc?view=revision&revision=1558828  View
204460 40174 CVE-2013-4590 http://tomcat.apache.org/security-6.html  View
204461 40174 CVE-2013-4590 http://tomcat.apache.org/security-7.html  View
204462 40174 CVE-2013-4590 http://tomcat.apache.org/security-8.html  View
204463 40174 CVE-2013-4590 http://www-01.ibm.com/support/docview.wss?uid=swg21667883  View
204464 40174 CVE-2013-4590 http://www-01.ibm.com/support/docview.wss?uid=swg21675886  View
204465 40174 CVE-2013-4590 http://www-01.ibm.com/support/docview.wss?uid=swg21677147  View
204466 40174 CVE-2013-4590 http://www-01.ibm.com/support/docview.wss?uid=swg21678231  View
204467 40174 CVE-2013-4590 DSA-3530  View
204468 40174 CVE-2013-4590 MDVSA-2015:052  View
204469 40174 CVE-2013-4590 MDVSA-2015:084  View
204470 40174 CVE-2013-4590 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
204471 40174 CVE-2013-4590 65768  View
204472 40174 CVE-2013-4590 http://www.vmware.com/security/advisories/VMSA-2014-0008.html  View
204473 40174 CVE-2013-4590 https://bugzilla.redhat.com/show_bug.cgi?id=1069911  View
204474 40174 CVE-2013-4590 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24516 JVNDB-2013-006091 Apache Tomcat における "Tomcat の内部" 情報を取得される脆弱性 Apache Tomcat には、"Tomcat の内部" 情報を取得される脆弱性が存在します。 CVE-2013-4590 64532 CVE-2013-4590 40174 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006091.html 2013-12-26 2016-11-22 View