Skip to content
OpenAdvisories

Archive

23 April 2010

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium —
    CVE-2010-1157 Public exploit EPSS 53%

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

    Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field…