Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088, CVE-2011-1183, and CVE-2011-1419.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security
    constraints that have been configured through annotations, which allows remote attackers to bypass
    intended access restrictions via HTTP requests. NOTE: this vulnerability exists because of an incomplete
    fix for CVE-2011-1088, CVE-2011-1183, and CVE-2011-1419. (CVE-2011-1582)

The remote host is affected by the vulnerability described in GLSA-201206-24 (Apache Tomcat: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Apache Tomcat. Please       review the CVE identifiers referenced below for details.
  Impact :

    The vulnerabilities allow an attacker to cause a Denial of Service, to       hijack a session, to bypass authentication, to inject webscript, to       enumerate valid usernames, to read, modify and overwrite arbitrary files,       to bypass intended access restrictions, to delete work-directory files,       to discover the server&rsquo;s hostname or IP, to bypass read permissions for       files or HTTP headers, to read or write files outside of the intended       working directory, and to obtain sensitive information by reading a log       file.
  Workaround :

    There is no known workaround at this time.

The version of Tomcat installed on the remote host is prior to 7.0.14. It is, therefore, affected by a vulnerability as referenced in the fixed_in_apache_tomcat_7.0.14_security-7 advisory.

  - Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security     constraints that have been configured through annotations, which allows remote attackers to bypass     intended access restrictions via HTTP requests. NOTE: this vulnerability exists because of an incomplete     fix for CVE-2011-1088, CVE-2011-1183, and CVE-2011-1419. (CVE-2011-1582)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
409791	SCA: security update for org.apache.tomcat:tomcat (GHSA-3xpj-jgv5-q4vv)	Tenable Cloud Security	SCA Checks	medium
409791	SCA: security update for org.apache.tomcat:tomcat (GHSA-3xpj-jgv5-q4vv)	Tenable Self-Hosted Container Security	SCA Checks	medium
59677	GLSA-201206-24 : Apache Tomcat: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
54301	Apache Tomcat 7.0.12 < 7.0.14 multiple vulnerabilities	Nessus	Web Servers	medium

Detections

Analytics

CVE-2011-1582

medium

Tenable Plugins

medium

medium

medium

medium