CVE-2016-8745
- Source
- https://cve.org/CVERecord?id=CVE-2016-8745
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-8745.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2016-8745
- Aliases
- Downstream
CLSA (1)
DLA (1)
DSA (2)
MGASA (1)
openSUSE (2)
UBUNTU (1)
- Related
- Published
- 2017-08-10T22:29:00Z
- Modified
- 2026-10-16T02:45:08Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.16 to 6.0.48 resulted in the current Processor object being added to the Processor cache multiple times. This in turn meant that the same Processor could be used for concurrent requests. Sharing a Processor can result in information leakage between requests including, not not limited to, session ID and the response body. The bug was first noticed in 8.5.x onwards where it appears the refactoring of the Connector code for 8.5.x onwards made it more likely that the bug was observed. Initially it was thought that the 8.5.x refactoring introduced the bug but further investigation has shown that the bug is present in all currently supported Tomcat versions.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:apache:tomcat:8.0.0:rc10:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.0:rc3:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.0:rc5:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.10:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.11:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.12:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.13:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.14:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.15:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.17:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.18:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.19:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.20:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.21:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.22:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.23:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.24:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.25:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.26:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.27:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.28:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.29:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.30:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.31:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.32:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.33:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.34:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.35:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.36:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.37:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.38:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.39:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.8:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.9:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "8.0" }, { "last_affected": "8.0" }, { "introduced": "8.0.0-rc1" }, { "last_affected": "8.0.0-rc1" }, { "introduced": "8.0.0-rc10" }, { "last_affected": "8.0.0-rc10" }, { "introduced": "8.0.0-rc3" }, { "last_affected": "8.0.0-rc3" }, { "introduced": "8.0.0-rc5" }, { "last_affected": "8.0.0-rc5" }, { "introduced": "8.0.1" }, { "last_affected": "8.0.1" }, { "introduced": "8.0.2" }, { "last_affected": "8.0.2" }, { "introduced": "8.0.3" }, { "last_affected": "8.0.3" }, { "introduced": "8.0.4" }, { "last_affected": "8.0.4" }, { "introduced": "8.0.5" }, { "last_affected": "8.0.5" }, { "introduced": "8.0.6" }, { "last_affected": "8.0.6" }, { "introduced": "8.0.7" }, { "last_affected": "8.0.7" }, { "introduced": "8.0.8" }, { "last_affected": "8.0.8" }, { "introduced": "8.0.9" }, { "last_affected": "8.0.9" }, { "introduced": "8.0.10" }, { "last_affected": "8.0.10" }, { "introduced": "8.0.11" }, { "last_affected": "8.0.11" }, { "introduced": "8.0.12" }, { "last_affected": "8.0.12" }, { "introduced": "8.0.13" }, { "last_affected": "8.0.13" }, { "introduced": "8.0.14" }, { "last_affected": "8.0.14" }, { "introduced": "8.0.15" }, { "last_affected": "8.0.15" }, { "introduced": "8.0.16" }, { "last_affected": "8.0.16" }, { "introduced": "8.0.17" }, { "last_affected": "8.0.17" }, { "introduced": "8.0.18" }, { "last_affected": "8.0.18" }, { "introduced": "8.0.19" }, { "last_affected": "8.0.19" }, { "introduced": "8.0.20" }, { "last_affected": "8.0.20" }, { "introduced": "8.0.21" }, { "last_affected": "8.0.21" }, { "introduced": "8.0.22" }, { "last_affected": "8.0.22" }, { "introduced": "8.0.23" }, { "last_affected": "8.0.23" }, { "introduced": "8.0.24" }, { "last_affected": "8.0.24" }, { "introduced": "8.0.25" }, { "last_affected": "8.0.25" }, { "introduced": "8.0.26" }, { "last_affected": "8.0.26" }, { "introduced": "8.0.27" }, { "last_affected": "8.0.27" }, { "introduced": "8.0.28" }, { "last_affected": "8.0.28" }, { "introduced": "8.0.29" }, { "last_affected": "8.0.29" }, { "introduced": "8.0.30" }, { "last_affected": "8.0.30" }, { "introduced": "8.0.31" }, { "last_affected": "8.0.31" }, { "introduced": "8.0.32" }, { "last_affected": "8.0.32" }, { "introduced": "8.0.33" }, { "last_affected": "8.0.33" }, { "introduced": "8.0.34" }, { "last_affected": "8.0.34" }, { "introduced": "8.0.35" }, { "last_affected": "8.0.35" }, { "introduced": "8.0.36" }, { "last_affected": "8.0.36" }, { "introduced": "8.0.37" }, { "last_affected": "8.0.37" }, { "introduced": "8.0.38" }, { "last_affected": "8.0.38" }, { "introduced": "8.0.39" }, { "last_affected": "8.0.39" } ], "source": "CPE_STRING" } ], "vendor_product": "apache:tomcat" } ] }- References
-
- https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/4113c05d37f37c12b8033205684f04033c5f7a9bae117d4af23b32b4%40%3Cannounce.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
- http://rhn.redhat.com/errata/RHSA-2017-0457.html
- http://rhn.redhat.com/errata/RHSA-2017-0527.html
- http://www.debian.org/security/2017/dsa-3754
- http://www.debian.org/security/2017/dsa-3755
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.securityfocus.com/bid/94828
- http://www.securitytracker.com/id/1037432
- https://access.redhat.com/errata/RHSA-2017:0455
- https://access.redhat.com/errata/RHSA-2017:0456
- https://access.redhat.com/errata/RHSA-2017:0935
- https://security.gentoo.org/glsa/201705-09
- https://security.netapp.com/advisory/ntap-20180607-0002/
Affected packages
Git / github.com/apache/tomcat
Affected ranges
- Type
- GIT
- Repo
- https://github.com/apache/tomcat
- Events
-
IntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.0" }, { "last_affected": "7.0.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.1" }, { "last_affected": "7.0.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.2" }, { "last_affected": "7.0.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.3" }, { "last_affected": "7.0.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.4" }, { "last_affected": "7.0.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.5" }, { "last_affected": "7.0.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.6" }, { "last_affected": "7.0.6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.7" }, { "last_affected": "7.0.7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.8" }, { "last_affected": "7.0.8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.9" }, { "last_affected": "7.0.9" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.11" }, { "last_affected": "7.0.11" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.12" }, { "last_affected": "7.0.12" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.13" }, { "last_affected": "7.0.13" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.14" }, { "last_affected": "7.0.14" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.15" }, { "last_affected": "7.0.15" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.16" }, { "last_affected": "7.0.16" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.17" }, { "last_affected": "7.0.17" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.18" }, { "last_affected": "7.0.18" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.19" }, { "last_affected": "7.0.19" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.20" }, { "last_affected": "7.0.20" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.21" }, { "last_affected": "7.0.21" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.22" }, { "last_affected": "7.0.22" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.23" }, { "last_affected": "7.0.23" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.24" }, { "last_affected": "7.0.24" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.25" }, { "last_affected": "7.0.25" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.26" }, { "last_affected": "7.0.26" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.27" }, { "last_affected": "7.0.27" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.28" }, { "last_affected": "7.0.28" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.29" }, { "last_affected": "7.0.29" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.30" }, { "last_affected": "7.0.30" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.31" }, { "last_affected": "7.0.31" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.32" }, { "last_affected": "7.0.32" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.33" }, { "last_affected": "7.0.33" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.34" }, { "last_affected": "7.0.34" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.35" }, { "last_affected": "7.0.35" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.36" }, { "last_affected": "7.0.36" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.37" }, { "last_affected": "7.0.37" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.38" }, { "last_affected": "7.0.38" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.39" }, { "last_affected": "7.0.39" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.40" }, { "last_affected": "7.0.40" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.41" }, { "last_affected": "7.0.41" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.42" }, { "last_affected": "7.0.42" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.43" }, { "last_affected": "7.0.43" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.44" }, { "last_affected": "7.0.44" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.45" }, { "last_affected": "7.0.45" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.46" }, { "last_affected": "7.0.46" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.47" }, { "last_affected": "7.0.47" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.48" }, { "last_affected": "7.0.48" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.49" }, { "last_affected": "7.0.49" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.50" }, { "last_affected": "7.0.50" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.52:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.52" }, { "last_affected": "7.0.52" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.53:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.53" }, { "last_affected": "7.0.53" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.54" }, { "last_affected": "7.0.54" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.55:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.55" }, { "last_affected": "7.0.55" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.56:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.56" }, { "last_affected": "7.0.56" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.57:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.57" }, { "last_affected": "7.0.57" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.58:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.58" }, { "last_affected": "7.0.58" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.59:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.59" }, { "last_affected": "7.0.59" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.60:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.60" }, { "last_affected": "7.0.60" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.61:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.61" }, { "last_affected": "7.0.61" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.62:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.62" }, { "last_affected": "7.0.62" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.63:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.63" }, { "last_affected": "7.0.63" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.64:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.64" }, { "last_affected": "7.0.64" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.65:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.65" }, { "last_affected": "7.0.65" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.66:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.66" }, { "last_affected": "7.0.66" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.67:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.67" }, { "last_affected": "7.0.67" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.68:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.68" }, { "last_affected": "7.0.68" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.69:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.69" }, { "last_affected": "7.0.69" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.70:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.70" }, { "last_affected": "7.0.70" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.71:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.71" }, { "last_affected": "7.0.71" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.72:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.72" }, { "last_affected": "7.0.72" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.73:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.73" }, { "last_affected": "7.0.73" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.0" }, { "last_affected": "8.5.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.1" }, { "last_affected": "8.5.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.2" }, { "last_affected": "8.5.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.3" }, { "last_affected": "8.5.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.4" }, { "last_affected": "8.5.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.5" }, { "last_affected": "8.5.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.6" }, { "last_affected": "8.5.6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.7" }, { "last_affected": "8.5.7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.8" }, { "last_affected": "8.5.8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone1" }, { "last_affected": "9.0.0-milestone1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone10" }, { "last_affected": "9.0.0-milestone10" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone11" }, { "last_affected": "9.0.0-milestone11" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone12" }, { "last_affected": "9.0.0-milestone12" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone13" }, { "last_affected": "9.0.0-milestone13" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone2" }, { "last_affected": "9.0.0-milestone2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone3" }, { "last_affected": "9.0.0-milestone3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone4" }, { "last_affected": "9.0.0-milestone4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone5" }, { "last_affected": "9.0.0-milestone5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone6" }, { "last_affected": "9.0.0-milestone6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone7" }, { "last_affected": "9.0.0-milestone7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone8" }, { "last_affected": "9.0.0-milestone8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone9" }, { "last_affected": "9.0.0-milestone9" } ], "source": "CPE_STRING" } ] }
Affected versions
7.*
7.0.0
7.0.1
7.0.11
7.0.12
7.0.13
7.0.14
7.0.15
7.0.16
7.0.17
7.0.18
7.0.19
7.0.2
7.0.20
7.0.21
7.0.22
7.0.23
7.0.24
7.0.25
7.0.26
7.0.27
7.0.28
7.0.29
7.0.3
7.0.30
7.0.31
7.0.32
7.0.33
7.0.34
7.0.35
7.0.36
7.0.37
7.0.38
7.0.39
7.0.4
7.0.40
7.0.41
7.0.42
7.0.43
7.0.44
7.0.45
7.0.46
7.0.47
7.0.48
7.0.49
7.0.5
7.0.50
7.0.52
7.0.53
7.0.54
7.0.55
7.0.56
7.0.57
7.0.58
7.0.59
7.0.6
7.0.60
7.0.61
7.0.62
7.0.63
7.0.64
7.0.65
7.0.66
7.0.67
7.0.68
7.0.69
7.0.7
7.0.70
7.0.71
7.0.72
7.0.73
7.0.8
7.0.9
8.*
8.5.0
8.5.1
8.5.2
8.5.3
8.5.4
8.5.5
8.5.6
8.5.7
8.5.8
9.*
9.0.0-milestone1
9.0.0-milestone10
9.0.0-milestone11
9.0.0-milestone12
9.0.0-milestone13
9.0.0-milestone2
9.0.0-milestone3
9.0.0-milestone4
9.0.0-milestone5
9.0.0-milestone6
9.0.0-milestone7
9.0.0-milestone8
9.0.0-milestone9