NVD

Id
8410  
Name
CVE-2011-1475  
Description
The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-04-08  
Modified Date
2011-09-21  
Seq
2011-1475  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48189 8410 CVE-2011-1475 oval:org.mitre.oval:def:12374  View
48190 8410 CVE-2011-1475 20110406 [SECURITY] CVE-2011-1475 Apache Tomcat information disclosure  View
48191 8410 CVE-2011-1475 8188  View
48192 8410 CVE-2011-1475 http://svn.apache.org/viewvc?view=revision&revision=1086349  View
48193 8410 CVE-2011-1475 http://svn.apache.org/viewvc?view=revision&revision=1086352  View
48194 8410 CVE-2011-1475 http://tomcat.apache.org/security-7.html  View
48195 8410 CVE-2011-1475 20110406 [SECURITY] CVE-2011-1475 Apache Tomcat information disclosure  View
48196 8410 CVE-2011-1475 47199  View
48197 8410 CVE-2011-1475 1025303  View
48198 8410 CVE-2011-1475 ADV-2011-0894  View
48199 8410 CVE-2011-1475 tomcat-httpbio-info-disclosure(66676)  View
48200 8410 CVE-2011-1475 https://issues.apache.org/bugzilla/show_bug.cgi?id=50957  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31217 JVNDB-2011-001457 Apache Tomcat の HTTP BIO コネクタにおけるレスポンスを閲覧される脆弱性 Apache Tomcat の HTTP BIO コネクタは、HTTP のパイプラインを適切に処理しないため、他のクライアントへ送信したレスポンスを閲覧される脆弱性が存在します。 CVE-2011-1475 49382 CVE-2011-1475 8410 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001457.html 2011-03-28 2011-04-28 View