NVD

Id
50122  
Name
CVE-2009-2901  
Description
The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements via HTTP requests.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2010-01-28  
Modified Date
2016-08-22  
Seq
2009-2901  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253644 50122 CVE-2009-2901 APPLE-SA-2010-03-29-1  View
253645 50122 CVE-2009-2901 SUSE-SR:2010:008  View
253646 50122 CVE-2009-2901 openSUSE-SU-2012:1700  View
253647 50122 CVE-2009-2901 openSUSE-SU-2012:1701  View
253648 50122 CVE-2009-2901 openSUSE-SU-2013:0147  View
253649 50122 CVE-2009-2901 SSRT100029  View
253650 50122 CVE-2009-2901 SSRT100825  View
253651 50122 CVE-2009-2901 HPSBST02955  View
253652 50122 CVE-2009-2901 1023503  View
253653 50122 CVE-2009-2901 http://support.apple.com/kb/HT4077  View
253654 50122 CVE-2009-2901 http://svn.apache.org/viewvc?rev=892815&view=rev  View
253655 50122 CVE-2009-2901 http://svn.apache.org/viewvc?rev=902650&view=rev  View
253656 50122 CVE-2009-2901 http://tomcat.apache.org/security-5.html  View
253657 50122 CVE-2009-2901 http://tomcat.apache.org/security-6.html  View
253658 50122 CVE-2009-2901 USN-899-1  View
253659 50122 CVE-2009-2901 MDVSA-2010:176  View
253660 50122 CVE-2009-2901 MDVSA-2010:177  View
253661 50122 CVE-2009-2901 20100124 [SECURITY] CVE-2009-2901 Apache Tomcat insecure partial deploy after failed undeploy  View
253662 50122 CVE-2009-2901 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
253663 50122 CVE-2009-2901 37942  View
253664 50122 CVE-2009-2901 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
253665 50122 CVE-2009-2901 http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
253666 50122 CVE-2009-2901 ADV-2010-0213  View
253667 50122 CVE-2009-2901 tomcat-autodeploy-security-bypass(55856)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35289 JVNDB-2010-001069 Apache Tomcat の autodeployment プロセスにおける意図された認証要件を回避される脆弱性 Apache Tomcat の autodeployment プロセスには、autoDeploy が設定されている場合、アンデプロイ失敗後に残存する appBase ファイルをデプロイするため、意図された認証要件を回避される脆弱性が存在します。 CVE-2009-2901 40332 CVE-2009-2901 50122 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001069.html 2010-01-28 2015-03-23 View