The version of Apache Tomcat installed on the remote host is 8.5.x prior to 8.5.16. It is, therefore, affected by multiple vulnerabilities :

 - A flaw exists in the CORS filter because the HTTP Vary header was not properly added. This allows a remote attacker to conduct client-side and server-side cache poisoning attacks. (CVE-2017-7674)

 - A flaw exists in the HTTP/2 implementation that bypasses a number of security checks that prevented directory traversal attacks. A remote attacker can exploit this to bypass security constraints. (CVE-2017-7675)

Note that the scanner has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 or later but prior to 9.0.0.M22. It is, therefore, affected by multiple vulnerabilities :

 - A flaw exists in the CORS filter because the HTTP Vary header was not properly added. This allows a remote attacker to conduct client-side and server-side cache poisoning attacks. (CVE-2017-7674)

 - A flaw exists in the HTTP/2 implementation that bypasses a number of security checks that prevented directory traversal attacks. A remote attacker can exploit this to bypass security constraints. (CVE-2017-7675)

Note that the scanner has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.

Two issues were discovered in the Tomcat servlet and JSP engine.

  - CVE-2017-7674     Rick Riemer discovered that the Cross-Origin Resource     Sharing filter did not add a Vary header indicating     possible different responses, which could lead to cache     poisoning.

  - CVE-2017-7675 (stretch only)     Markus Dorschmidt found that the HTTP/2 implementation     bypassed some security checks, thus allowing an attacker     to conduct directory traversal attacks by using     specially crafted URLs.

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 or later but prior to 9.0.0.M22. It is, therefore, affected by multiple vulnerabilities :

  - A flaw exists in the CORS filter because the HTTP Vary header was     not properly added. This allows a remote attacker to conduct     client-side and server-side cache poisoning attacks.
    (CVE-2017-7674)

  - A flaw exists in the HTTP/2 implementation that bypasses a number     of security checks that prevented directory traversal attacks. A     remote attacker can exploit this to bypass security constraints.
    (CVE-2017-7675)

Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.

The version of Apache Tomcat installed on the remote host is 8.5.x prior to 8.5.16. It is, therefore, affected by multiple vulnerabilities :

  - A flaw exists in the CORS filter because the HTTP Vary header was     not properly added. This allows a remote attacker to conduct     client-side and server-side cache poisoning attacks.
    (CVE-2017-7674)

  - A flaw exists in the HTTP/2 implementation that bypasses a number     of security checks that prevented directory traversal attacks. A     remote attacker can exploit this to bypass security constraints.
    (CVE-2017-7675)

Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
112301	Apache Tomcat 8.5.x < 8.5.16 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	11/5/2018	3/14/2023	high
112295	Apache Tomcat 9.0.0.M1 < 9.0.0.M22 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	11/5/2018	3/13/2024	high
103259	Debian DSA-3974-1 : tomcat8 - security update	Nessus	Debian Local Security Checks	9/18/2017	1/4/2021	high
102590	Apache Tomcat 9.0.0M1 < 9.0.0.M22 Multiple Vulnerabilities	Nessus	Web Servers	8/18/2017	5/6/2024	high
102589	Apache Tomcat 8.5.x < 8.5.16 Multiple Vulnerabilities	Nessus	Web Servers	8/18/2017	5/6/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high