Security Advisory

CVE-2011-3190

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-08-31 23:00:00

Last updated 2024-08-06 23:29:55

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret a request body as a new request.

← Browse all CVEs View on cve.org ↗