未評価
An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11Input...
CVE-2016-8747
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory tomcat.apache.org
- advisory tomcat.apache.org
- advisory security.netapp.com
- patch svn.apache.org
- patch svn.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- patch lists.apache.org
- web securityfocus.com