Skip to main content

CVE-2011-1183

Severity

6.5

Description

Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass intended access restrictions via HTTP requests to a meta-data complete web application. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1088 and CVE-2011-1419.

Mitigation

We recommend upgrading to a version of this component that is not vulnerable to this specific issue.

Related links:

Project

Apache Tomcat

Category
n/a
Tags
data
configuration
Date Disclosed

2011-04-08

Date Discovered

2011-03-03

Apache Tomcat 7.0.x

First release:
2011-01-14
First release:
2021-03-31
CVEs:
55
Support Lifecycle:
Namespace:
javax
7.0.11
Feel Vulnerable? 

Contact us so we can help you.

* These fields are required.