Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-1475
5
MEDIUMCVSS v2
Published
April 8, 2011
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users."
apache/tomcat
GitHubApache Tomcat
GitHubApache Tomcat= 7.0.8, = 7.0.1, = 7.0.2, = 7.0.5, = 7.0.0, = 7.0.6, = 7.0.11, = 7.0.7, = 7.0.10, = 7.0.9, = 7.0.3, = 7.0.4NVD