CVE-2015-5346 in Tomcat
요약 (영어)
Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to hijack web sessions by leveraging use of a requestedSessionSSL field for an unintended request, related to CoyoteAdapter.java and Request.java.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
예약하다
2015. 07. 01.
공개
2016. 02. 24.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 81078 | Apache Tomcat 약한 인증 | 384 | 입증되지 않음 | 공식 수정 | CVE-2015-5346 |