VDB
BDU%3A2021-01013
BDU%3A2021-01013
PUBLISHED
CVSS 5.800000190734863 MEDIUM
Уязвимость сервера приложений Apache Tomcat, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю отправить скрытый HTTP-запрос (атака типа HTTP Request Smuggling)
Risk Scores
CVSS 2.0
5.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Oracle Corp., Novell Inc., Red Hat, Inc., Apache Software Foundation, АО «Концерн ВНИИНС» | Debian GNU/Linux, Oracle Transportation Management, Instantis EnterpriseTrack, Agile Engineering Data Management, OpenSUSE Leap, Database Server, Oracle Hospitality Guest Access, Jboss Web Server, Oracle Communications Element Manager, Oracle Agile PLM, Communications Instant Messaging Server, Oracle Health Sciences Empirica Inspections, Oracle Health Sciences Empirica Signal, Siebel UI Framework, Tomcat, Hyperion Infrastructure Technology, MySQL Enterprise Monitor, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) | |
| Сообщество свободного программного обеспечения, Oracle Corp., Novell Inc., Red Hat Inc., Apache Software Foundation, АО «Концерн ВНИИНС» | Debian GNU/Linux, Oracle Transportation Management, Instantis EnterpriseTrack, Agile Engineering Data Management, OpenSUSE Leap, Database Server, Oracle Hospitality Guest Access, Jboss Web Server, Oracle Communications Element Manager, Oracle Agile PLM, Communications Instant Messaging Server, Oracle Health Sciences Empirica Inspections, Oracle Health Sciences Empirica Signal, Siebel UI Framework, Tomcat, Hyperion Infrastructure Technology, MySQL Enterprise Monitor, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) |
Timeline
- Mar 2, 2021 CVE Published
- Nov 21, 2023 CVE Updated
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
References
- https://lists.apache.org/thread.html/r7bc994c965a34876bd94d5ff15b4e1e30b6220a15eb9b47c81915b78@%3Ccommits.tomee.apache.org%3E advisory
- https://lists.apache.org/thread.html/r88def002c5c78534674ca67472e035099fbe088813d50062094a1390%40%3Cannounce.tomcat.apache.org%3E advisory
- https://lists.apache.org/thread.html/rc31cbabb46cdc58bbdd8519a8f64b6236b2635a3922bbeba0f0e3743@%3Ccommits.tomee.apache.org%3E advisory
- https://security-tracker.debian.org/tracker/CVE-2019-17569 advisory
- https://lists.debian.org/debian-lts-announce/2020/03/msg00006.html advisory
- https://www.debian.org/security/2020/dsa-4673 advisory
- https://www.debian.org/security/2020/dsa-4680 advisory
- https://www.oracle.com/security-alerts/cpujan2021.html advisory
- https://www.oracle.com/security-alerts/cpujul2020.html advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html advisory
- https://access.redhat.com/security/cve/cve-2019-17569 advisory
- https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00025.html advisory
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url