CVE-2011-1475 in Tomcatinfo

Summary

The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users."

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

03/21/2011

Disclosure

04/08/2011

CPE

ready

CVSS

5.3

EPSS

0.11701

Activities

Very Low

Sources

Want to know what is going to be exploited?

We predict KEV entries!