CVE-2008-2938 — Vulnetix

CVE-2008-2938 PUBLISHED

Une vulnérabilité dans Apache Tomcat permet à un utilisateur distant malintentionné de contourner la politique de sécurité et de porter atteinte à la confidentialité des données présentes sur le serveur vulnérable.

EPSS 92.70% · 99.8th percentile

Risk Scores

EPSS Score

92.70%

99.8th percentile

Affected Products

Vendor	Product	Versions
Apache	Tomcat

Exploit Intelligence

Reproducible exploits for: CVE-2016-1240 CVE-2008-2938 CVE-2014-2064 CVE-2014-1904 (github-poc-repo)
Reproducible exploits for: CVE-2016-1240 CVE-2008-2938 CVE-2014-2064 CVE-2014-1904 (github-poc-repo)
Reproducible exploits for: CVE-2016-1240 CVE-2008-2938 CVE-2014-2064 CVE-2014-1904 (github-poc-repo)
Reproducible exploits for: CVE-2016-1240 CVE-2008-2938 CVE-2014-2064 CVE-2014-1904 (github-poc-repo)
Reproducible exploits for: CVE-2016-1240 CVE-2008-2938 CVE-2014-2064 CVE-2014-1904 (github-poc-repo)
Reproducible exploits for: CVE-2016-1240 CVE-2008-2938 CVE-2014-2064 CVE-2014-1904 (github-poc-repo)
Reproducible exploits for: CVE-2016-1240 CVE-2008-2938 CVE-2014-2064 CVE-2014-1904 (github-poc-repo)
Reproducible exploits for: CVE-2016-1240 CVE-2008-2938 CVE-2014-2064 CVE-2014-1904 (github-poc-repo)
Reproducible exploits for: CVE-2016-1240 CVE-2008-2938 CVE-2014-2064 CVE-2014-1904 (github-poc-repo)
SERVER-APACHE Apache Tomcat allowLinking URIencoding directory traversal attempt [disabled] (vulnetix)

…and 41 more exploits

Timeline

CVE Published
Jul 21, 2006 PoC Published
Mar 14, 2007 PoC Published
Aug 10, 2008 PoC Published
Nov 7, 2009 PoC Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
May 20, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 26, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Feb 9, 2023 EPSS Score

References

https://cert.ssi.gouv.fr/avis/CERTA-2008-AVI-416/ advisory
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2938 advisory
https://cert.ssi.gouv.fr/avis/CERTA-2008-AVI-492/ advisory
http://support.apple.com/kb/HT3216 advisory

Open in Interactive Console →