CVSS 6.5 · Medium EPSS 0,86%
Kerentanan Session Fixation pada apache tomcat. Skor CVSS 3.1 6.5 (Medium) menurut CISA ADP.
Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| apache | tomcat | Versi 9.0.1 hingga sebelum 9.0.106 |
| apache | tomcat | Versi 10.0.0 hingga sebelum 10.1.42 |
| apache | tomcat | Versi 11.0.0 hingga sebelum 11.0.8 |
| apache | tomcat | Versi 9.0.0 milestone1 |
| apache | tomcat | Versi 9.0.0 milestone10 |
| apache | tomcat | Versi 9.0.0 milestone11 |
| apache | tomcat | Versi 9.0.0 milestone12 |
| apache | tomcat | Versi 9.0.0 milestone13 |
| apache | tomcat | Versi 9.0.0 milestone14 |
| apache | tomcat | Versi 9.0.0 milestone15 |
| apache | tomcat | Versi 9.0.0 milestone16 |
| apache | tomcat | Versi 9.0.0 milestone17 |
| apache | tomcat | Versi 9.0.0 milestone18 |
| apache | tomcat | Versi 9.0.0 milestone19 |
| apache | tomcat | Versi 9.0.0 milestone2 |
| apache | tomcat | Versi 9.0.0 milestone20 |
| apache | tomcat | Versi 9.0.0 milestone21 |
| apache | tomcat | Versi 9.0.0 milestone22 |
| apache | tomcat | Versi 9.0.0 milestone23 |
| apache | tomcat | Versi 9.0.0 milestone24 |
| apache | tomcat | Versi 9.0.0 milestone25 |
| apache | tomcat | Versi 9.0.0 milestone26 |
| apache | tomcat | Versi 9.0.0 milestone27 |
| apache | tomcat | Versi 9.0.0 milestone3 |
| apache | tomcat | Versi 9.0.0 milestone4 |
| apache | tomcat | Versi 9.0.0 milestone5 |
| apache | tomcat | Versi 9.0.0 milestone6 |
| apache | tomcat | Versi 9.0.0 milestone7 |
| apache | tomcat | Versi 9.0.0 milestone8 |
| apache | tomcat | Versi 9.0.0 milestone9 |