VDB
BDU%3A2019-01767
BDU%3A2019-01767
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Уязвимость сервера приложений Apache Tomcat, связанная с использованием открытой переадресации, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
Risk Scores
CVSS 2.0
4.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd., Сообщество свободного программного обеспечения, Red Hat Inc., Fedora Project, Oracle Corp., Apache Software Foundation, Novell Inc., McAfee Inc., АО «Концерн ВНИИНС» | Ubuntu, Debian GNU/Linux, Red Hat Enterprise Linux, Fedora, Oracle Secure Global Desktop, Oracle Retail Order Broker, Instantis EnterpriseTrack, MICROS Relate CRM Software, Tomcat, Agile Engineering Data Management, OpenSUSE Leap, Database Server, Enterprise Security Manager, Communications Instant Messaging Server, Jboss Web Server, Oracle Hospitality Guest Access, MICROS Retail XBRi Loss Prevention, Workload Manager, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) |
Timeline
- May 16, 2019 CVE Published
- Nov 21, 2023 CVE Updated
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
References
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html url
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html url
- http://www.securityfocus.com/bid/105524 url
- https://access.redhat.com/errata/RHSA-2019:0130 url
- https://access.redhat.com/errata/RHSA-2019:0131 url
- https://access.redhat.com/errata/RHSA-2019:0485 url
- https://access.redhat.com/errata/RHSA-2019:1529 url
- https://kc.mcafee.com/corporate/index?page=content&id=SB10284 url
- https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba@%3Cdev.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75@%3Cannounce.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb@%3Cdev.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661@%3Cdev.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04@%3Cdev.tomcat.apache.org%3E url
…and 14 more