GHSA-p543-jg43-9pm5

Suggest an improvement
Source
https://github.com/advisories/GHSA-p543-jg43-9pm5
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-p543-jg43-9pm5/GHSA-p543-jg43-9pm5.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-p543-jg43-9pm5
Aliases
  • CVE-2002-0493
Published
2022-04-30T18:19:20Z
Modified
2024-02-12T18:42:07.044601Z
Summary
Apache Tomcat may be started without proper security settings
Details

Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.

Database specific 
{
    "nvd_published_at": "2002-08-12T04:00:00Z",
    "github_reviewed_at": "2024-02-12T18:18:48Z",
    "cwe_ids": [
        "CWE-276"
    ],
    "github_reviewed": true,
    "severity": "HIGH"
}
References

Affected packages

Maven / org.apache.tomcat:tomcat

Package

Name
org.apache.tomcat:tomcat
View open source insights on deps.dev
Purl
pkg:maven/org.apache.tomcat/tomcat

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.0b7

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-p543-jg43-9pm5/GHSA-p543-jg43-9pm5.json"