CVE-2015-5345
medium · 5.3The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence of a directory via a URL that lacks a trailing / (slash) character.
5.3
CVSS
18.4%
EPSS (exploit prob.)
97th
EPSS percentile
2016-02-25
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
| apache | tomcat | 6.0.0 |
| apache | tomcat | 6.0.0 |
| apache | tomcat | 6.0.1 |
| apache | tomcat | 6.0.1 |
| apache | tomcat | 6.0.2 |
| apache | tomcat | 6.0.2 |
| apache | tomcat | 6.0.2 |
| apache | tomcat | 6.0.4 |
| apache | tomcat | 6.0.4 |
| apache | tomcat | 6.0.10 |
| apache | tomcat | 6.0.11 |
| apache | tomcat | 6.0.13 |
| apache | tomcat | 6.0.14 |
| apache | tomcat | 6.0.16 |
| apache | tomcat | 6.0.18 |
| apache | tomcat | 6.0.20 |
| apache | tomcat | 6.0.24 |
| apache | tomcat | 6.0.26 |
| apache | tomcat | 6.0.28 |
| apache | tomcat | 6.0.29 |
| apache | tomcat | 6.0.30 |
| apache | tomcat | 6.0.32 |
| apache | tomcat | 6.0.33 |
| apache | tomcat | 6.0.35 |
| apache | tomcat | 6.0.36 |
| apache | tomcat | 6.0.37 |
| apache | tomcat | 6.0.39 |
| apache | tomcat | 6.0.41 |
| apache | tomcat | 6.0.43 |
| apache | tomcat | 6.0.44 |
| apache | tomcat | 7.0.0 |
| apache | tomcat | 7.0.2 |
| apache | tomcat | 7.0.4 |
| apache | tomcat | 7.0.5 |
| apache | tomcat | 7.0.6 |
| apache | tomcat | 7.0.10 |
| apache | tomcat | 7.0.11 |
| apache | tomcat | 7.0.12 |
Check a specific version with /api/v1/cve/match.
References
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html
- http://marc.info/?l=bugtraq&m=145974991225029&w=2
- http://packetstormsecurity.com/files/135892/Apache-Tomcat-Directory-Disclosure.html
- http://rhn.redhat.com/errata/RHSA-2016-1089.html
- http://rhn.redhat.com/errata/RHSA-2016-2045.html
- http://rhn.redhat.com/errata/RHSA-2016-2599.html
- http://seclists.org/bugtraq/2016/Feb/146
- http://seclists.org/fulldisclosure/2016/Feb/122
- http://svn.apache.org/viewvc?view=revision&revision=1715206
- http://svn.apache.org/viewvc?view=revision&revision=1715207
- http://svn.apache.org/viewvc?view=revision&revision=1715213
- http://svn.apache.org/viewvc?view=revision&revision=1715216
- http://svn.apache.org/viewvc?view=revision&revision=1716882
- http://svn.apache.org/viewvc?view=revision&revision=1716894
- http://svn.apache.org/viewvc?view=revision&revision=1717209
- http://svn.apache.org/viewvc?view=revision&revision=1717212
- http://svn.apache.org/viewvc?view=revision&revision=1717216
- http://tomcat.apache.org/security-6.html
- http://tomcat.apache.org/security-7.html
- http://tomcat.apache.org/security-8.html
- http://tomcat.apache.org/security-9.html
- http://www.debian.org/security/2016/dsa-3530
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2015-5345