The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to
    indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one
    request to a different request. (CVE-2008-4308)

According to its self-reported version number, the instance of Apache Tomcat 5.x listening on the remote host is prior to 5.5.21. It is, therefore, affected by the following vulnerabilities :

  - The remote Apache Tomcat install is vulnerable to a     cross-site scripting attack. The client supplied     Accept-Language headers are not validated which allows     an attacker to use a specially crafted URL to inject     arbitrary HTML and script code into the user's browser.
    (CVE-2007-1358)

  - If the remote Apache Tomcat install is configured to use     the SingleSignOn Valve, the JSESSIONIDSSO cookie does     not have the 'secure' attribute set if authentication     takes place over HTTPS. This allows the JSESSIONIDSSO     cookie to be sent to the same server when HTTP content     is requested. (CVE-2008-0128)

  - The remote Apache Tomcat install is affected by an     information disclosure vulnerability. The doRead method     fails to return the proper error code for certain error     conditions, which can cause POST content to be sent to     different, and improper, requests. (CVE-2008-4308)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
433005	SCA: security update for org.apache.tomcat:tomcat (GHSA-7g59-hm8v-cwmc)	Tenable Cloud Security	SCA Checks	medium
433005	SCA: security update for org.apache.tomcat:tomcat (GHSA-7g59-hm8v-cwmc)	Tenable Self-Hosted Container Security	SCA Checks	medium
46868	Apache Tomcat 5.x < 5.5.21 Multiple Vulnerabilities	Nessus	Web Servers	medium

Detections

Analytics

CVE-2008-4308

medium

Tenable Plugins

medium

medium

medium