NVD

Id
8512  
Name
CVE-2011-1582  
Description
Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088, CVE-2011-1183, and CVE-2011-1419.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-05-20  
Modified Date
2011-09-21  
Seq
2011-1582  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48942 8512 CVE-2011-1582 [www-announce] 20110517 [SECURITY] CVE-2011-1582 Apache Tomcat security constraint bypass  View
48943 8512 CVE-2011-1582 8256  View
48944 8512 CVE-2011-1582 http://svn.apache.org/viewvc?view=revision&revision=1100832  View
48945 8512 CVE-2011-1582 http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.14_%28released_12_May_2011%29  View
48946 8512 CVE-2011-1582 20110517 [SECURITY] CVE-2011-1582 Apache Tomcat security constraint bypass  View
48947 8512 CVE-2011-1582 47886  View
48948 8512 CVE-2011-1582 ADV-2011-1255  View
48949 8512 CVE-2011-1582 tomcat-annotations-security-bypass(67515)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31416 JVNDB-2011-001656 Apache Tomcat におけるアクセス制限を回避される脆弱性 Apache Tomcat は、Servlet に対する最初のリクエストを、セキュリティ制限を行わずに処理するため、アクセス制限を回避される脆弱性が存在します。 CVE-2011-1582 49489 CVE-2011-1582 8512 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001656.html 2011-05-08 2011-05-31 View