2018-10-04 15:29:00 2019-06-12 00:29:01

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Oracle Secure global desktop 5.4 (not an official CPE) Oracle Retail order broker 15.0 (not an official CPE) Oracle Retail order broker 5.2 (not an official CPE) Oracle Retail order broker 5.1 (not an official CPE) Oracle Instantis enterprisetrack 17.3 (not an official CPE) Oracle Instantis enterprisetrack 17.2 (not an official CPE) Oracle Instantis enterprisetrack 17.1 (not an official CPE) Oracle Hospitality guest access 4.2.1 (not an official CPE) Oracle Hospitality guest access 4.2.0 (not an official CPE) Oracle Communications application session controller 3.8.0 (not an official CPE) Oracle Communications application session controller 3.7.1 (not an official CPE) Netapp Snap creator framework - (not an official CPE) Apache Tomcat 9.0.11 (not an official CPE) Apache Tomcat 9.0.10 (not an official CPE) Apache Tomcat 9.0.9 (not an official CPE) Apache Tomcat 9.0.8 (not an official CPE) Apache Tomcat 9.0.7 (not an official CPE) Apache Tomcat 9.0.6 (not an official CPE) Apache Tomcat 9.0.5 (not an official CPE) Apache Tomcat 9.0.4 (not an official CPE) Apache Tomcat 9.0.3 (not an official CPE) Apache Tomcat 9.0.2 (not an official CPE) Apache Tomcat 9.0.1 (not an official CPE) Apache Tomcat 9.0.0 M9 (not an official CPE) Apache Tomcat 9.0.0 M8 (not an official CPE) Apache Tomcat 9.0.0 M7 (not an official CPE) Apache Tomcat 9.0.0 M6 (not an official CPE) Apache Tomcat 9.0.0 M5 (not an official CPE) Apache Tomcat 9.0.0 M4 (not an official CPE) Apache Tomcat 9.0.0 M3 (not an official CPE) Apache Tomcat 9.0.0 M27 (not an official CPE) Apache Tomcat 9.0.0 M26 (not an official CPE) Apache Tomcat 9.0.0 M25 (not an official CPE) Apache Tomcat 9.0.0 M24 (not an official CPE) Apache Tomcat 9.0.0 M23 (not an official CPE) Apache Tomcat 9.0.0 M22 (not an official CPE) Apache Tomcat 9.0.0 M21 (not an official CPE) Apache Tomcat 9.0.0 M20 (not an official CPE) Apache Tomcat 9.0.0 M2 (not an official CPE) Apache Tomcat 9.0.0 M19 (not an official CPE) Apache Tomcat 9.0.0 M18 (not an official CPE) Apache Tomcat 9.0.0 M17 (not an official CPE) Apache Tomcat 9.0.0 M16 (not an official CPE) Apache Tomcat 9.0.0 M15 (not an official CPE) Apache Tomcat 9.0.0 M14 (not an official CPE) Apache Tomcat 9.0.0 M13 (not an official CPE) Apache Tomcat 9.0.0 M12 (not an official CPE) Apache Tomcat 9.0.0 M11 (not an official CPE) Apache Tomcat 9.0.0 M10 (not an official CPE) Apache Tomcat 9.0.0 M1 (not an official CPE) Apache Tomcat 9.0.0 (not an official CPE) Apache Tomcat 8.5.33 (not an official CPE) Apache Tomcat 8.5.32 (not an official CPE) Apache Tomcat 8.5.31 (not an official CPE) Apache Tomcat 8.5.30 (not an official CPE) Apache Tomcat 8.5.29 (not an official CPE) Apache Tomcat 8.5.28 (not an official CPE) Apache Tomcat 8.5.27 (not an official CPE) Apache Tomcat 8.5.26 (not an official CPE) Apache Tomcat 8.5.25 (not an official CPE) Apache Tomcat 8.5.24 (not an official CPE) Apache Tomcat 8.5.23 (not an official CPE) Apache Tomcat 8.5.22 (not an official CPE) Apache Tomcat 8.5.21 (not an official CPE) Apache Tomcat 8.5.20 (not an official CPE) Apache Tomcat 8.5.19 (not an official CPE) Apache Tomcat 8.5.18 (not an official CPE) Apache Tomcat 8.5.17 (not an official CPE) Apache Tomcat 8.5.16 (not an official CPE) Apache Tomcat 8.5.15 (not an official CPE) Apache Tomcat 8.5.14 (not an official CPE) Apache Tomcat 8.5.13 (not an official CPE) Apache Tomcat 8.5.12 (not an official CPE) Apache Tomcat 8.5.11 (not an official CPE) Apache Tomcat 8.5.10 (not an official CPE) Apache Tomcat 8.5.9 (not an official CPE) Apache Tomcat 8.5.8 (not an official CPE) Apache Tomcat 8.5.7 (not an official CPE) Apache Tomcat 8.5.6 (not an official CPE) Apache Tomcat 8.5.5 (not an official CPE) Apache Tomcat 8.5.4 (not an official CPE) Apache Tomcat 8.5.3 (not an official CPE) Apache Tomcat 8.5.2 (not an official CPE) Apache Tomcat 8.5.1 (not an official CPE) Apache Tomcat 8.5.0 (not an official CPE) Apache Tomcat 7.0.90 (not an official CPE) Apache Tomcat 7.0.89 (not an official CPE) Apache Tomcat 7.0.88 (not an official CPE) Apache Tomcat 7.0.87 (not an official CPE) Apache Tomcat 7.0.86 (not an official CPE) Apache Tomcat 7.0.85 (not an official CPE) Apache Tomcat 7.0.84 (not an official CPE) Apache Tomcat 7.0.83 (not an official CPE) Apache Tomcat 7.0.82 (not an official CPE) Apache Tomcat 7.0.81 (not an official CPE) Apache Tomcat 7.0.80 (not an official CPE) Apache Tomcat 7.0.79 (not an official CPE) Apache Tomcat 7.0.78 (not an official CPE) Apache Tomcat 7.0.77 (not an official CPE) Apache Tomcat 7.0.76 (not an official CPE) Apache Tomcat 7.0.75 (not an official CPE) Apache Tomcat 7.0.74 (not an official CPE) Apache Tomcat 7.0.73 (not an official CPE) Apache Tomcat 7.0.72 (not an official CPE) Apache Tomcat 7.0.71 (not an official CPE) Apache Tomcat 7.0.70 (not an official CPE) Apache Tomcat 7.0.69 (not an official CPE) Apache Tomcat 7.0.68 (not an official CPE) Apache Tomcat 7.0.67 (not an official CPE) Apache Tomcat 7.0.66 (not an official CPE) Apache Tomcat 7.0.65 (not an official CPE) Apache Tomcat 7.0.64 (not an official CPE) Apache Tomcat 7.0.60 (not an official CPE) Apache Tomcat 7.0.61 (not an official CPE) Apache Tomcat 7.0.62 (not an official CPE) Apache Tomcat 7.0.63 (not an official CPE) Apache Tomcat 7.0.59 (not an official CPE) Apache Software Foundation Tomcat 7.0.57 Apache Tomcat 7.0.58 (not an official CPE) Apache Software Foundation Tomcat 7.0.56 Apache Software Foundation Tomcat 7.0.55 Apache Software Foundation Tomcat 7.0.54 Apache Tomcat 7.0.53 (not an official CPE) Apache Tomcat 7.0.52 (not an official CPE) Apache Tomcat 7.0.51 (not an official CPE) Apache Software Foundation Tomcat 7.0.50 Apache Software Foundation Tomcat 7.0.49 Apache Software Foundation Tomcat 7.0.48 Apache Software Foundation Tomcat 7.0.47 Apache Software Foundation Tomcat 7.0.46 Apache Software Foundation Tomcat 7.0.45 Apache Software Foundation Tomcat 7.0.44 Apache Software Foundation Tomcat 7.0.43 Apache Software Foundation Tomcat 7.0.42 Apache Software Foundation Tomcat 7.0.41 Apache Software Foundation Tomcat 7.0.40 Apache Software Foundation Tomcat 7.0.39 Apache Software Foundation Tomcat 7.0.38 Apache Software Foundation Tomcat 7.0.37 Apache Software Foundation Tomcat 7.0.36 Apache Software Foundation Tomcat 7.0.35 Apache Software Foundation Tomcat 7.0.34 Apache Software Foundation Tomcat 7.0.33 Apache Software Foundation Tomcat 7.0.32 Apache Software Foundation Tomcat 7.0.31 Apache Software Foundation Tomcat 7.0.30 Apache Software Foundation Tomcat 7.0.29 Apache Software Foundation Tomcat 7.0.28 Apache Software Foundation Tomcat 7.0.27 Apache Software Foundation Tomcat 7.0.26 Apache Software Foundation Tomcat 7.0.25 Apache Software Foundation Tomcat 7.0.24 Apache Software Foundation Tomcat 7.0.23